haha, yeah, pbkdf tho lol

it kinda kills the use case of a low power device

there is no reason why a 24 word key should need any hashing tho, and a 12 word key should only need one hash operation...

but adding a password on top then you start to talk about why pbkdf and argon 2 and whatnot

maybe we should devise a word key scheme for nostr because nobody is using nip-06 anyway, and maybe the different key type has some ways to benefit this

also, you gotta have secret in memory somewhere, it's just about isolating it from a leaky execution environment, i'm pretty sure there is very little risk of losing an nsec from a browser signer or amber or whatever

don't put the signer in the same app that can spend money or spam messages anyhow

Reply to this note

Please Login to reply.

Discussion

was doing some research into having BIP-39 on environments like SEs and my conclusion is fuck this shit