Viewing a single comment thread. View all comments

quettil t1_j1hxw6k wrote

Reply to comment by Fit-Anything8352 in The Lastpass hack was worse than the company first reported by glawgii

> (they'd still be left with the impossible task of brute forcing the equivalent of an 128-bit cipher).

https://pbs.twimg.com/media/FksX2y8XoAIRr7b?format=jpg&name=small

Not necessarily impossible.

1

Fit-Anything8352 t1_j1imutz wrote

It is impossible if they implemented the key derivation function correctly. If they used salt and used a slow enough KDF then you can't do dictionary or rainbow table attacks on the password, so you have to brute force the key. Which means the impossible task of brute forcing the equivalent of an 128-bit cipher

1