My intent was that the server should still be responsible for scrambling the password as usual. - My question is only about changing the algorithm server-side.
Is there a reason that one doesn't use a public-key encryption function with a unique, random public key per password to store the scrambled passwords? One would then store the public key and the encrypted password as…
My intent was that the server should still be responsible for scrambling the password as usual. - My question is only about changing the algorithm server-side.
Is there a reason that one doesn't use a public-key encryption function with a unique, random public key per password to store the scrambled passwords? One would then store the public key and the encrypted password as…