Skip to main content
2 votes

Security Risks of Deriving Crypto Wallet Seed Phrases Using Deterministically Derived Salt

This scheme has several major issues. First off, don't roll your own, i.e., don't try to invent your own cryptographic schemes. There are many ideas which look good on paper but turn out to be fatally ...
Ja1024's user avatar
  • 11.4k
1 vote

Security Risks of Deriving Crypto Wallet Seed Phrases Using Deterministically Derived Salt

The scheme as presented seems more risky to me than it needs to be, because words from the mnemonic phrase are being fed back into a hash-function, and not a password-based key derivation function (...
brynk's user avatar
  • 1,137
1 vote
Accepted

Why is the "intermediate" challenge needed in Bluetooth ECDH since the "real" verification is performed at the end with code comparison?

The purpose of the commitment Cb is to prevent an active man-in-the-middle attacker from performing a brute-force attack against the function g2 and thereby making Va and Vb match. While the 6-digit ...
Ja1024's user avatar
  • 11.4k
1 vote

Revoking a digital signature at the cryptographic level

The correct answer here, as Steffen pointed out, is to issue a signed revocation where all parties can access it. The general way this is done is for there to be an available list of revoked ...
somehybrid's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible