search

FrankChen021 / SafeBoxIssues

0 stars 0 forks source link

use mnemonics to help reset the password #30

Open FrankChen021 opened 6 years ago

FrankChen021 commented 6 years ago

  1. store SymmetricEncryt ( privateKey, userId ) on server when registering a user

  2. generate mnemonics(privateKey) and show it to user after register

  3. to get back private key, first verify client via email/sms,

  4. input mnemonics, get private key, generate a value which is E(privateKey, userId)

  5. verify the encrypted value is matched with the value pre-stored in the server

  6. if is matched, reset the password

FrankChen021 commented 6 years ago

the private key should be exported by mnemonics indirectly with passphrase equals to empty

for mnemonics, see: https://github.com/bitcoin/bips/blob/master/bip-0039.mediawiki