Generate a keypair from a password

后端 未结 2 1207
粉色の甜心
粉色の甜心 2021-01-25 10:44

I would like to use asymmetric encryption based with a private key based on a password. The requirement is the security level provided must be the same of (1) using password-bas

2条回答
  •  旧巷少年郎
    2021-01-25 11:18

    If you base the private key solely on a password, it will only be as strong as the password, i.e. whoever can guess the password can get the private key.

    This is comparable to generating a private/public key pair, encrypting the private key with a symmetric cipher and then publishing both together.

    This of course makes the whole system weaker, since you no longer need to have the secret token - you only need to know the password.

提交回复
热议问题