Re: Password authentication
Re: Password authentication
- Subject: Re: Password authentication
- From: Jens Alfke <email@hidden>
- Date: Thu, 13 Feb 2014 15:57:55 -0800
On Feb 13, 2014, at 3:38 PM, Daniel Wambold <email@hidden> wrote:
> Any sensitive information should be encrypted with the 256 bit key, since it will be unreadable without the correct password file _as well as_ the correct password.
In that case, the file with the password seems unnecessary. You can directly convert the user-entered password into an AES key — using the algorithm in your sample, or something more standard like PBKDF — and decrypt the file with that.
—Jens
_______________________________________________
Cocoa-dev mailing list (email@hidden)
Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden