git.schokokeks.org
Repositories
Help
Report an Issue
derivepassphrase.git
Code
Commits
Branches
Tags
Suche
Strukturansicht:
57540d3
Branches
Tags
documentation-tree
master
unstable/modularize-and-refactor-test-machinery
unstable/ssh-agent-socket-providers
wishlist
0.1.0
0.1.1
0.1.2
0.1.3
0.2.0
0.3.0
0.3.1
0.3.2
0.3.3
0.4.0
0.5.1
0.5.2
derivepassphrase.git
docs
changelog.d
20250128_134809_the-13th-letter_equivalent_hmac_key.md
Document the vault "interchangable passphrases" artefact in the changelog
Marco Ricci
commited
57540d3
at 2025-01-28 14:09:47
20250128_134809_the-13th-letter_equivalent_hmac_key.md
Blame
History
Raw
### Added - [`Vault`][derivepassphrase.vault.Vault] now can report on whether two master passphrases are interchangable with respect to the service passphrases they can derive. This is an artefact of how the master passphrase is converted to the random bit sequence with which the service passphrases are generated. See the corresponding [FAQ entry: What are "interchangable passphrases" in vault?][INTERCHANGABLE_PASSPHRASES] for details, including the practical security (non-)implications. The `derivepassphrase vault` command-line interface does not address this in any manner, mostly because the "non-standard" interchangable variants of a given master password tend to be ugly to type in, and because they do not have practical security implications. [INTERCHANGABLE_PASSPHRASES]: ../explanation/faq-vault-interchangable-passphrases.md