Master secret & salts - Githubissues

silversixpence-crypto / dapol

DAPOL+ Proof of Liabilities using Bulletproofs and Sparse Merkle trees

MIT License

8 stars 2 forks source link

Open Stentonian opened 8 months ago

Stentonian commented 8 months ago

~~Master secret should never be generated randomly~~, but should have the option to come from raw input or password input (which will be fed through the KDF to get the master secret)
~~The salts can be generated randomly, or provided~~
A warning should be generated for low-entropy master-secret/salt input

Stentonian commented 7 months ago

Master secret not randomly generated, and salts have option to be generated randomly: https://github.com/silversixpence-crypto/dapol/pull/148