You can not lose your private key, if you drop it first(blog.imcotton.xyz) |
You can not lose your private key, if you drop it first(blog.imcotton.xyz) |
Does the author not understand entropy or probability?
Deriving an RSA key from the product of two memorizable numbers makes it brute-force-able, and sends us back to 1990s export controlled encryption strength.
Tattoo-ing a key on one’s arm (however ridiculous) would be better than the methods here.
Almost equivalent to going back to username+password and use your favorite git hash as your password.
If you are truly paranoid about loosing your ssh key, get a hardware yubikey instead.
The reason for not using Argon2 or scrypt is because PBKDF2 is native provide by Webcrypto yet FIPS-140 compliance.