Document the vault "interchangable passphrases" artefact in the changelog
Marco Ricci commited on 2025-01-28 14:09:47
Zeige 1 geänderte Dateien mit 17 Einfügungen und 0 Löschungen.
| ... | ... |
@@ -0,0 +1,17 @@ |
| 1 |
+### Added |
|
| 2 |
+ |
|
| 3 |
+ - [`Vault`][derivepassphrase.vault.Vault] now can report on whether two |
|
| 4 |
+ master passphrases are interchangable with respect to the service |
|
| 5 |
+ passphrases they can derive. |
|
| 6 |
+ This is an artefact of how the master passphrase is converted to the |
|
| 7 |
+ random bit sequence with which the service passphrases are generated. |
|
| 8 |
+ See the corresponding [FAQ entry: What are "interchangable passphrases" |
|
| 9 |
+ in vault?][INTERCHANGABLE_PASSPHRASES] for details, including the |
|
| 10 |
+ practical security (non-)implications. |
|
| 11 |
+ |
|
| 12 |
+ The `derivepassphrase vault` command-line interface does not address |
|
| 13 |
+ this in any manner, mostly because the "non-standard" interchangable |
|
| 14 |
+ variants of a given master password tend to be ugly to type in, and |
|
| 15 |
+ because they do not have practical security implications. |
|
| 16 |
+ |
|
| 17 |
+[INTERCHANGABLE_PASSPHRASES]: ../explanation/faq-vault-interchangable-passphrases.md |
|
| 0 | 18 |