News for hackers. Stuff that matters.

A comment on Bitwarden Design Flaw. Parent comment

Re:Bitwarden Design Flaw by jve on Tuesday January 24, 2023 @02:51AM (#34500728)
Some warning to users: Changing iterations MAY corrupt your data:

> Making changes in a session with a “stale” encryption key will cause data corruption that will make your data unrecoverable.

https://community.bitwarden.com/t/increasing-kdf-interations...

https://news.ycombinator.com/item?id=34152181

EDIT: Look below, this actually applies to changing master password.

[ Parent | on HN ]
Re:Bitwarden Design Flaw by kadoban on Tuesday January 24, 2023 @03:03AM (#34500825)
> Some warning to users: Changing iterations MAY corrupt your data

This is incorrect.

https://bitwarden.com/help/what-encryption-is-used/#changing...

> When you change the iteration count, you'll be logged out of all clients. Though the risk involved in rotating your encryption key does not exist when changing KDF iteration count, we still recommend exporting your vault beforehand.

[ Parent | on HN ]
Re:Bitwarden Design Flaw by EspadaV9 on Tuesday January 24, 2023 @03:10AM (#34500869)
That is when you change your master password, or rotate your encryption keys, not changing the number of iterations (as far as I can tell).

From what I read, changing the number of iterations is safe to do.

[ Parent | on HN ]