Remix.run Logo
▲ gruez 4 hours ago

You're not gonna remember a AES256 key either (or at least not many of them), not to mention the ergonomics associated with entering a AES256 key. The whole point of security chips like google's titan m2 or apple's secure enclave is to strengthen weak passwords (eg. 6 digit pins) so they offer comparable security to 256 bit keys, without having to enter 256 bit keys.

▲kalaksi 4 hours ago | parent | next [-]

Password isn't used directly as key. The key is derived with PBKDF.

▲gruez 3 hours ago | parent [-]

>The key is derived with PBKDF.

Which doesn't do shit even if you're using argon with 32 GB memory usage or whatever. NSA is always going to be able to out-compute you. Not to mention you need a difficulty level that's usable for daily use, but the NSA can brute-force at their leisure, possibly decades in the future.

▲SV_BubbleTime 4 hours ago | parent | prev [-]

>You're not gonna remember a AES256 key either

Did we wake up in a world without key derivation functions to turn passwords/phrases into keys?