News for hackers. Stuff that matters.

A comment on What We Do in the /etc./Shadow – Cryptography with Passwords.

Re:What We Do in the /etc./Shadow – Cryptography with Passwords by _448 on Saturday January 07, 2023 @09:34AM (#34288290)
What is the recommended way of deriving a private key from a password and/or passphrase?

Any pointers to relevant literature will also help.

[ Parent | on HN ]
Re:What We Do in the /etc./Shadow – Cryptography with Passwords by TillE on Saturday January 07, 2023 @09:58AM (#34288528)
Typically you don't need to know much more than what the libsodium docs tell you:

https://libsodium.gitbook.io/doc/password_hashing

[ Parent | on HN ]
Re:What We Do in the /etc./Shadow – Cryptography with Passwords by adrian_b on Saturday January 07, 2023 @12:05PM (#34290041)
Yes, that is a very good choice.

It uses the Argon2 algorithm (RFC9106).

I have studied Argon2 and in my opinion it really is an improvement over the older methods.

[ Parent | on HN ]
Re:What We Do in the /etc./Shadow – Cryptography with Passwords by _448 on Saturday January 07, 2023 @04:16PM (#34292906)
Thank you for the link! I will go through it.

And is there a way to derive a public key using a derived private key, say, for example, by using ECC?

[ Parent | on HN ]
Re:What We Do in the /etc./Shadow – Cryptography with Passwords by some_furry on Saturday January 07, 2023 @04:27PM (#34293024)
crypto_box_seed_keypair()

Or for signatures, crypto_sign_seed_keypair(). Use the output of Argon2 as the seed.

[ Parent | on HN ]
Re:What We Do in the /etc./Shadow – Cryptography with Passwords by _448 on Sunday January 08, 2023 @03:57AM (#34297340)
Thank you very much. That was really helpful!
[ Parent | on HN ]