Hacker News new | ask | show | jobs
by bascule 5054 days ago
The difference between the output of SHA512 and random data is negligible, provided that the master password is of non-negligible entropy. This is a necessary property of a secure hash function. HMAC or HKDF would probably be more appropriate here, but this usage is not inherently insecure.

I'd certainly love to see you try to recover the master password from only 10 hashes.