Hacker News new | ask | show | jobs
by vibe42 34 days ago
Many crypto wallets use a key derivation function (KDF) to add an amount of computation (and memory usage) per password tried - to mitigate brute force of weak passwords.

The increase in compute (decrease in brute-force cost) combined with price increases in many crypto tokens means brute-forcing old wallets can become worth it years after passwords were forgotten.

And of course even smaller, local AI models can now easily write optimized scripts to brute-force any given KDF function.

1 comments

how can that possibly work while supporting offline backup & restore?
The compute power needed use to be of the order of 5s per password try. So it effectively mitigate brute force back them, you need a absurd compute power to crack them.

Moore law did its thing, now you can do it with a lot less computer power.

> Moore law did its thing, now you can do it with a lot less computer power.

s/power/time/ maybe? Or on second thought: so energy-efficicient that it actually uses less power in the same-or-shorter time… which brings me back to "less compute power".