6 ms·
What I find concerning is PKDBF was used, even https://en.wikipedia.org/wiki/PBKDF2 https://en.wikipedia.org/wiki/PBKDF2 quotes PKDBF1 and PKDBF2,and that is re
by tommieb 4y ago
What I find concerning is PKDBF was used, even https://en.wikipedia.org/wiki/PBKDF2 https://en.wikipedia.org/wiki/PBKDF2 quotes PKDBF1 and PKDBF2,and that is recommended to use PKDBF2. Is there any evidence to show that they indeed rolled their own encryption rather than use a de-facto standard AES algorithm? Or is there something that is missing.
- fear-anger-hate 4y agoPKDBF is just the password derivation function to better protect the vault against dictionary attacks. The vaults are still encrypted with AES-256.