News for hackers. Stuff that matters.

A comment on Let them paste passwords. Parent comment

Re:Let them paste passwords by rkeene2 on Thursday May 18, 2017 @10:56AM (#14367748)
I don't even have the ability to read my password manager's master key, since all passwords are encrypted with different AES keys, which is then encrypted with a private key I have no ability to read (only ask my smartcard to perform RSA on, if I can authenticate to it).

hunter2 is the password manager I wrote for this: https://chiselapp.com/user/rkeene/repository/hunter2/

[ Parent | on HN ]
Re:Let them paste passwords by moosingin3space on Thursday May 18, 2017 @12:04PM (#14368392)
This is an interesting concept for storing keys. I may end up using something similar in a proof-of-concept I've been thinking about.
[ Parent | on HN ]
Re:Let them paste passwords by palunon on Thursday May 18, 2017 @05:09PM (#14371113)
What if you loose your smartcard ?
[ Parent | on HN ]
Re:Let them paste passwords by rkeene2 on Wednesday May 24, 2017 @04:51PM (#14413356)
hunter2 supports the concept of users, which are named public keys so I can share individual passwords with other users. One of those other users can be a different smartcard or a different person who can then authorized my new card.
[ Parent | on HN ]
Re:Let them paste passwords by mazamats on Thursday May 18, 2017 @05:31PM (#14371275)
He could have an encrypted digital copy somewhere else
[ Parent | on HN ]
Re:Let them paste passwords by rkeene2 on Wednesday May 24, 2017 @04:51PM (#14413362)
I don't keep my private key, in any format, accessible -- usually the private keys are generated on the card and never revealed.
[ Parent | on HN ]