Timeline for Password manager that uses a mix of long and short key derivation functions [duplicate]
Current License: CC BY-SA 3.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 23, 2016 at 10:22 | history | closed |
Matthew Xander wireghoul WhiteWinterWolf LvB |
Duplicate of Is this idea for a password manager secure? If so, why doesn't anybody use it? [closed] | |
| Jun 23, 2016 at 8:10 | comment | added | WhiteWinterWolf | Please avoid posting the same question on multiple StackExchange websites. The issue here is that either you link website password to some per-site secret stored locally, in this case the easiest is just for this secret to be the actual password, or as you stated on Cryptography you want to go to some "zero storage" way, but an attacker, knowing one of your password, may deduce the master password and/or the other passwords (practically getting any password will be nearly equivalent of getting your complete password store). | |
| Jun 21, 2016 at 15:43 | review | Close votes | |||
| Jun 23, 2016 at 10:22 | |||||
| Jun 21, 2016 at 15:27 | comment | added | Ben | Also see security.stackexchange.com/questions/115243/… and others...variants of this question get asked ALL THE TIME. | |
| Jun 21, 2016 at 15:25 | comment | added | Ben | A note on that possible duplicate: I know the underlying hash details differ significantly. But note the main problem with such schemes isn't security of the algorithm, it's usability. And we all know what happens when you sacrifice usability for security.... | |
| Jun 20, 2016 at 19:01 | history | tweeted | twitter.com/StackSecurity/status/744968428264497156 | ||
| Jun 20, 2016 at 14:51 | history | edited | Anders | CC BY-SA 3.0 |
edited tags; edited title
|
| Jun 20, 2016 at 14:30 | review | First posts | |||
| Jun 20, 2016 at 14:41 | |||||
| Jun 20, 2016 at 14:27 | history | asked | gw653 | CC BY-SA 3.0 |