salty axolotl

stef s at ctrlc.hu
Sat Sep 20 09:53:06 PDT 2014


On Sat, Sep 20, 2014 at 06:43:56PM +0200, CodesInChaos wrote:
> Why would you use scrypt for anything except strengthening low entropy
> secrets (like passwords)?
> For high entropy secrets there are much simpler and cleaner
> alternatives, such as HKDF.

excellent observation. with nacl would generic_hash(master_key, some_const, key_size) 
be sufficient as a kdf?

-- 
otr fp: https://www.ctrlc.hu/~stef/otr.txt



More information about the cypherpunks mailing list