Re: Memorizing a 128 bit / 256 bit hex key

On 18/06/2024 15:37, Stefan Claas wrote:

Stefan Claas wrote:
 

Stefan Claas wrote:
>

You thoughts please, gentlemen.
>
Let's say you travel and do not want to store your secret hex key on your
device and recreate it from memory.
>
What do you think about this proposal?
>
$ printf '%x' $(date -u -d '1979-01-01 12:34:56' +%s) $(date ...) 4 or 8 times.
>
One has to remember only the dates (times are optional) and then simply run the
one liner.

>
And use that as a seed for Argon2id key creation.
>

>
The encryption software can be downloaded when one arrives at his destination.

Hmm, from where? Threat analysis?

I think diceware passwords with Argon2id are the solution, because one can
recreate the Argon2id hex key with with the memorized diceware passphrase. :-)

Much better.
Both diceware and argon2id can be improved on, but generally that would mostly work.
Peter Fairbrother
bored, just got out of hospital, and laid up with bad knee