From: Michael Savage Date: Mon, 1 Jan 2018 13:44:06 +0000 (+0000) Subject: Avoid : X-Git-Url: https://git.codecow.com/?a=commitdiff_plain;h=46d4973ead215b8c47d9883a1a5805447346805f;p=Monocypher.git Avoid : --- diff --git a/doc/man/man3/crypto_argon2i.3monocypher b/doc/man/man3/crypto_argon2i.3monocypher index ea417d8..9c148ce 100644 --- a/doc/man/man3/crypto_argon2i.3monocypher +++ b/doc/man/man3/crypto_argon2i.3monocypher @@ -104,12 +104,11 @@ Can be if .Fa key_size is zero. -The key is generally not needed, but it does have some uses: it is -supposed to be unknown to the attacker. -In the context of password derivation, it would stay unknown -.Em even if an attacker steals the password database . -This may be possible if that key is stored on a separate server. -Note: changing the key requires hashing the user's password, +The key is generally not needed, but it does have some uses. +In the context of password derivation, it would be stored separately +from the password database, and would remain secret even if an +attacker were to steal the database. +Note that changing the key requires rehashing the user's password, which is only possible upon user login. .It Fa key_size The length of the key, in bytes. diff --git a/doc/man/man3/intro.3monocypher b/doc/man/man3/intro.3monocypher index d435fa7..3004d82 100644 --- a/doc/man/man3/intro.3monocypher +++ b/doc/man/man3/intro.3monocypher @@ -150,7 +150,7 @@ The .Pa /dev/urandom special file may be used on systems that do not provide an easy to use system call. -Be careful, though: being a file makes +Be careful though, being a file makes .Pa /dev/urandom hard to use correctly and securely. Reads may be interrupted, and more attacks are possible on a file than