Re:Show HN: Diffie-Hellman exchange for the layman
by boris1 on Thursday April 22, 2021 @02:17PM
(#26906029)
That's why you have the Check Digits. There's no way to communicate a long and cryptic password on the phone. But it is easy to compare check digits on the phone.
[ Parent
| on HN ]
Re:Show HN: Diffie-Hellman exchange for the layman
by MauranKilom on Friday April 23, 2021 @08:53AM
(#26914228)
I'm not convinced that transmitting the first, say, 5 characters of the full password is any less secure than transmitting the sum of all its "digits". In fact, I would expect the latter to be significantly easier to match by brute force by a MITM adversary.
Re:Show HN: Diffie-Hellman exchange for the layman
by boris1 on Sunday April 25, 2021 @07:22PM
(#26937675)
There's no difference for the MITM how I pick the Short Authentication String (SAS) (the check digits).
But there's a difference in terms of strength of the encryption key, if you are planning to use the full password as input to Key Derivation Function (KDF). If you make public the first 5 letters of a 44 letter password, you've just made lost some of the entropy.
By the way, based on a comment in this thread, I added a SHA-256 stage. I now hash the full password, and sum the bytes of the hash to generate the check digits.