Hacker News new | ask | show | jobs
by blueskin_ 4513 days ago
Considering the average user's password choice tendencies, that's still weaker than a key from a proper source of entropy, then password reuse on top of that.

That plus IIRC, RSA isn't deterministic even with the same seed. Not sure about generators for elliptic curve though.
2 comments
tga_d 4513 days ago
They're using key-stretching to mitigate the use of bad passphrases, though reuse will still be an issue.

https://wiki.mozilla.org/Identity/AttachedServices/KeyServer...

And RSA is deterministic.

link
icebraining 4513 days ago
I think it is, at least that's what Cryptico[1] does, if I understand it correctly.

[1] https://github.com/wwwtyro/cryptico

link