From 66941a60b69eb26bac53ab711cdbb3fa9443d1fe Mon Sep 17 00:00:00 2001 From: dschuermann Date: Mon, 29 Dec 2014 11:46:17 -0800 Subject: [PATCH] Updated Alternative Passphrase Methods (markdown) --- Alternative-Passphrase-Methods.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Alternative-Passphrase-Methods.md b/Alternative-Passphrase-Methods.md index 6b1abc3..072f3f9 100644 --- a/Alternative-Passphrase-Methods.md +++ b/Alternative-Passphrase-Methods.md @@ -1,4 +1,4 @@ -* New subpacket +## Tech As a general mechanism, we can add a non-exportable direct key signature to any keyring which carries a "hint" to the key's passphrase in one of its subpackets. This way, we can store auxiliary semantics about a passphrase while retaining the design principle that all information stored in the database is contained entirely in the keyring blobs. Exemplary types of such auxiliary information could be flags that the passphrase should be entered as a pin, lock pattern, or obtained via nfc. @@ -13,6 +13,7 @@ As on private key export for a new extra long passphrase to protect against offl ## Attack model | Attack | Passphrase | NFC | PIN | Lockpattern | +|-------- |--- |--- |--- |--- | | Offline brute force attacks | yes | yes | no | no | | Lend smartphone to other guy | | | | | | Shoulder surfing | no | yes | | | \ No newline at end of file