Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add an initial seed #9

Open
shauncroton opened this issue Jun 10, 2016 · 2 comments
Open

Add an initial seed #9

shauncroton opened this issue Jun 10, 2016 · 2 comments

Comments

@shauncroton
Copy link

I have not had a great play with this but is seems to me it lacks an initial seed value.
For example if I want both my and my wife's phone to both give back the same hash for say "amazon.com/password" and for no-one else to be able to generate same hash I would need to enter a common seed on both installations that would participate in the hash.

@phw
Copy link
Owner

phw commented Jun 10, 2016

True in general. But as this is just a implementation of pwdhash and the goal was to be compatible with that I won't introduce any changes not available in the original. The implementation should still work with all the pwdhash plugins that are available to desktop browsers.

I had already thought of extending this app into a more general password management solution, based on the pwdhash idea but extending it. One issue is of course the lack of browser extensions in that case. And more importantly my lack of time :)

@quassy
Copy link

quassy commented Jul 23, 2017

@phw Do you have any drafts for this? I'd be interested in collaborting to create a scrypt, Argon2 or bcrypt based solution with a user configurable salt and flexible iteration number (maybe something like 2^currentyear so hashes depend on the year they are created and people are motivated but not forced to update every year).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants