News for hackers. Stuff that matters.

A comment on LastPass users warned their master passwords are compromised. Parent comment

Re:LastPass users warned their master passwords are compromised by throw10920 on Tuesday December 28, 2021 @03:51PM (#29717997)
> Your master passwords aren't stored on their servers. Neither is your key information.

...and, those are the only things that really matter for an attacker. Encrypted data (assuming reasonably strong encryption) is useless without the key.

[ Parent | on HN ]
Re:LastPass users warned their master passwords are compromised by postalrat on Tuesday December 28, 2021 @08:12PM (#29720486)
Some encrypted data is worthless. Some isn't. Depends on what value it has when down the road the encryption is broken.
[ Parent | on HN ]
Re:LastPass users warned their master passwords are compromised by tatersolid on Wednesday December 29, 2021 @12:54AM (#29722320)
If AES being broken is in your personal threat model, you have far more to worry about than passwords.
[ Parent | on HN ]
Re:LastPass users warned their master passwords are compromised by postalrat on Wednesday December 29, 2021 @03:48PM (#29729812)
What if its broken in 10 years? Or in 50 years? Eventually it will be.
[ Parent | on HN ]
Re:LastPass users warned their master passwords are compromised by tatersolid on Thursday December 30, 2021 @09:26PM (#29744178)
I’d wager you could survey 100 cryptographers and at least 90 would say the AES-256 primitive itself will never be practically broken, even by large-scale quantum computers. Related-key attacks aren’t realistic or practical.
[ Parent | on HN ]
Re:LastPass users warned their master passwords are compromised by junon on Wednesday December 29, 2021 @09:57AM (#29725327)
Properly encrypted data is worthless unless you intend to get the keys somehow. Breaking industry standard encryption schemes shouldn't be in your threat model.
[ Parent | on HN ]