Hacker News new | ask | show | jobs
by d1plo1d 3912 days ago
I'm still trying to figure this out but isn't it sending the ECDH of the private key which would be much longer then what the average user is going to use as a password (eg. I don't know, 1024 bit or something) and therefore more secure then sending a hashed password?

Edit: And then you (maybe?) use your password to encrypt the private key locally.. maybe? That's a total guess. That's what I'd do :P

1 comments

No. Think of the ECDH public key as a 1024 bit hash value (which is basically what it is).
Oh.. [sad_panda.jpg]