You'll regret using natural keys

Re:You'll regret using natural keys by cogman10 on Wednesday June 05, 2024 @02:54PM (#40588840)

I think the biggest problem with this approach is it effectively pins you to a encryption key and algorithm (unless you embed some information in the key that lets you version the key, gotta think of that upfront).

Imagine, for example, that you picked DES and "kangaroo" as the secret several years back. You are now pinned to an algorithm and key with known security problems and a weak key.

[ Parent | on HN ]

Re:You'll regret using natural keys by Too on Thursday June 06, 2024 @02:19AM (#40594109)

Especially since you can try the encryption algorithm.

Create 1000 users very quickly in a row and you now have 1000 samples of enc(i) all the way up to enc(i+1000) that can help you break the algorithm.

Not saying it will be easy but it surely lowers the guarantees given by the encryption. Someone better at crypto can probably quantify this risk better than me.

[ Parent | on HN ]