Timeline for Do keyfiles actually add any meaningful security in the presence of strong passwords?
Current License: CC BY-SA 3.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 5, 2019 at 15:59 | answer | added | Justerio | timeline score: 0 | |
| Jun 5, 2019 at 15:08 | answer | added | ZCat | timeline score: 1 | |
| Feb 20, 2014 at 9:09 | vote | accept | HopelessN00b | ||
| May 30, 2013 at 2:23 | comment | added | HopelessN00b | @Adnan Yeah, I did read that question you linked when searching for an answer to this, but it seems to me like keyfiles as "something you have" don't serve that function any better than a second password - generate and record a random, maximum-character-length password (or put it into a YubiKey), store it offline, and... you've created a keyfile without using keyfiles. Right? | |
| May 30, 2013 at 2:07 | history | tweeted | twitter.com/#!/StackSecurity/status/339926045018951680 | ||
| May 30, 2013 at 1:15 | answer | added | Gilles 'SO- stop being evil' | timeline score: 9 | |
| May 30, 2013 at 0:59 | answer | added | David | timeline score: 2 | |
| May 29, 2013 at 23:21 | comment | added | Adi | In addition to having some misconceptions about password entropy (it doesn't come from the password itself, rather from how it is formed) and brue-forcing in TrueCrypt and similar solutions (Brute-Forcing a key is hopeless, and brute-forcing a password is painfully slow because of slow key derivation functions), you're also missing the whole point of keyfiles. Check "TrueCrypt and Keyfiles hidden among 500,000 other .pdf files" to clarify at least the last point. I hope someone would address the other points in a good answer. | |
| May 29, 2013 at 21:02 | history | asked | HopelessN00b | CC BY-SA 3.0 |