News for hackers. Stuff that matters.
Re:How did LastPass master passwords get compromised? by palant on Thursday December 30, 2021 @02:43PM (#29740590)
No, modern PAKE protocols work without the server actually knowing the password. The server has a “verifier” that lets them tell whether the client’s response to a given challenge is correct. I’m no expert on this topic but https://blog.cryptographyengineering.com/2018/10/19/lets-tal... is a good start.

There are no comments on this comment yet.