[tga_d]

They're using key-stretching to mitigate the use of bad passphrases, though reuse will still be an issue.

https://wiki.mozilla.org/Identity/AttachedServices/KeyServer...

And RSA is deterministic.