Skip to content

Master ID

Jump to bottom
ssburns edited this page Feb 29, 2016 · 3 revisions

Description

How the master ID is generated and stored

Response Sequence

The master Id is only created on local account creation

Requirements

  • MST-1. Master Id shall be a random 256-bit identity master key (IMK) and can never be stored
  • MST-2. When the IMK is created a 64-bit salt is also created and stored
  • MST-3. Using an SCRYPT based PBKDF2, the user password, salt, and difficulty parameters create a 256-bit mix key. mixKey = PBKDF2(password, salt, difficultyParams)
  • MST-4. The mix key shall always take 1-2 seconds to compute.
  • MST-5. The mixKey is XOR'd with the IMK and stored to create a derived IMK. dIMK = (IMK) XOR (mixKey). This value is a coded version of the users IMK.
  • MST-6. The mixKey is hashed using SHA256, the lower 128-bit of this result is stored as a password verifier.

Clone this wiki locally