CBCrypt: Encrypt from the client rather than send passwords to servers

Re:CBCrypt: Encrypt from the client rather than send passwor... by tptacek on Wednesday October 07, 2015 @10:16AM (#10346124)

How exactly does "starting with a cryptographic hash" solve this problem?

Remember, the attack is: start with "aardvark", run the deterministic key-generation process, hash, scrypt, elliptic curve and all, and check to see if you get the same result. If you don't, move on to "apple", then "ataxia" and so on.

The attacker has every piece of information in the system except the password string, which they can substitute with a dictionary.

[ Parent | on HN ]

Re:CBCrypt: Encrypt from the client rather than send passwor... by sarciszewski on Wednesday October 07, 2015 @01:01PM (#10347225)

I haven't had a chance to look at the code yet, but riddle me this: Are they eschewing salts entirely?

[ Parent | on HN ]

Re:CBCrypt: Encrypt from the client rather than send passwor... by tptacek on Wednesday October 07, 2015 @01:05PM (#10347255)

Yes. The same [password,name,host] tuple should produce the same keypair.

[ Parent | on HN ]