Nemeski to Privacy [email protected]English • 6 months agoSignal under fire for storing encryption keys in plaintextstackdiary.comexternal-linkmessage-square43fedilinkarrow-up1197arrow-down111cross-posted to: [email protected]privacy[email protected]technology[email protected]
arrow-up1186arrow-down1external-linkSignal under fire for storing encryption keys in plaintextstackdiary.comNemeski to Privacy [email protected]English • 6 months agomessage-square43fedilinkcross-posted to: [email protected]privacy[email protected]technology[email protected]
minus-square@[email protected]linkfedilinkEnglish32•6 months agoNot storing it in plaintext would require setting up some kind of password, right?
minus-squareboredsquirrellinkfedilinkEnglish14•edit-26 months agoSome way to encrypt the decryption key. This could also mean TPM + Pin. Or using a Nitrokey, externally, which stores the password to decrypt the decryption key. That is how user account unlocking (on GrapheneOS with Pixel phones) is done.
Not storing it in plaintext would require setting up some kind of password, right?
Some way to encrypt the decryption key.
This could also mean TPM + Pin. Or using a Nitrokey, externally, which stores the password to decrypt the decryption key.
That is how user account unlocking (on GrapheneOS with Pixel phones) is done.