On Feb 13, 2014, at 3:38 PM, Daniel Wambold <[email protected]> wrote:

> Any sensitive information should be encrypted with the 256 bit key, since it 
> will be unreadable without the correct password file _as well as_ the correct 
> password.

In that case, the file with the password seems unnecessary. You can directly 
convert the user-entered password into an AES key — using the algorithm in your 
sample, or something more standard like PBKDF — and decrypt the file with that.

—Jens
_______________________________________________

Cocoa-dev mailing list ([email protected])

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
https://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to [email protected]

Reply via email to