| |||||||||||||
Martin: Off the Record Messaging: A TutorialMartin: Off the Record Messaging: A TutorialPosted Jul 31, 2012 18:15 UTC (Tue) by jimparis (subscriber, #38647)Parent article: Martin: Off the Record Messaging: A Tutorial
I was confused about the benefits of using SMP versus just having each party encrypt a nonce using the secret key. This comment explains that SMP additionally prevents brute forcing against weak secrets:
http://stackoverflow.com/a/9352197
(Log in to post comments)
Martin: Off the Record Messaging: A Tutorial Posted Aug 1, 2012 9:12 UTC (Wed) by dvrabel (subscriber, #9500) [Link]
The response is a hash so given the challenge and response you can only brute force a set of possible master keys.
|
|||||||||||||