News for hackers. Stuff that matters.

A comment on CBCrypt: Encrypt from the client rather than send passwords to servers. Parent comment

Re:CBCrypt: Encrypt from the client rather than send passwor... by sarciszewski on Wednesday October 07, 2015 @01:01PM (#10347225)
I haven't had a chance to look at the code yet, but riddle me this: Are they eschewing salts entirely?
[ Parent | on HN ]
Re:CBCrypt: Encrypt from the client rather than send passwor... by tptacek on Wednesday October 07, 2015 @01:05PM (#10347255)
Yes. The same [password,name,host] tuple should produce the same keypair.
[ Parent | on HN ]