Comment

Comment by hinkley

There was a class of password algorithm that used your password and some other information as a seed for generating an asymmetric cypher, but the original Stanford proposal was apparently a bit light and nobody ever implemented it. I bumped into some new algorithms in the same category, but I'm blanking on the clever name they used to describe them all.

The server would only ever have your 'public key'. I'm not sure where you get the saltiness to prevent lookup tables but still let me log in from three devices with the same credentials.

parent hinkley 6 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton