#Keybase cryptocurrency password#
#Keybase cryptocurrency Offline#

The local keychain does not change, so a copy of encrypted keychain from any time period (before the change of the password or after it) works. This method can be used for any old password.Anyone, who knows the compromised password `p1` AND the mask `s1` can compute `k = s1 XOR scrypt(p1)`, thus having all information necessary to unlock the keychain. New mask `s2` is computed so that `s2 = k XOR scrypt(p2)` and sent to the server again.You change your keybase password do `p2`.Now consider your password `p1` has been compromised.The mask `s1` is then sent to the keybase.io server.The device-local keychain is encrypted symmetrically with a randomly generated key `k` for which `s1` is computed as `s1 = k XOR scrypt(p1)`. Setup your keybase local keychain on a device with your keybase password `p1`.knowledge of the server-sent mask corresponding to the old password (if you are the Keybase.io server everyone sends you these).copy of unencrypted local keychain from any of the user's devices.To be able to really decrypt user's local keychain you would need to have: If a user's password was compromised, and an attacker was also able to obtain the user's server-side mask, then that attacker would be able to decrypt the user's local keys even after the user did a password change. One vulnerability of the password change scheme, is that it's possible to decrypt secret keys using an old password. The server supplies this mask during decryption, but device keys are never exposed to the server, even in encrypted form.

#Keybase cryptocurrency Offline#

We've developed a simple server-aided protocol to do so, in which a server-side mask is updated during a password change, so that encrypted device keys on offline clients will be decryptable with the new password. Whenever a user stores a secret key on a device, it would be nice if she could encrypt that key with her passphrase, and if she changed her passphrase on any one of her machines, it would be reflected on the others. Keybase.io features a Local Key Security (LKS) as follows:

And key management is something we would like to discuss in this article. It is also doing other optional things such as an encrypted filesystem and synchronized key management.

Keybase.io is a service that according to their website 'maps your identity to your public keys, and vice versa.'. TL DR: We don't recommend storing any other than keybase-generated secret keys in keybase local keychain.