You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
ssburns edited this page Feb 29, 2016
·
2 revisions
Description
How to verify the IMK on login
Response Sequence
The user must enter a password and press login
Requirements
VMST-1. Using the same function that hashed the user password on creation, lookup the password salt, difficulty parameters, and the user's attempted password. mixKey' = PBKDF2(attempted password, salt, difficultyParams)
VMST-2. Hash the mix key using SHA256 and take the lower 128-bits and compare to the stored password verifier. If it matches the stored value, then the user has successfully logged in.
VMST-3. The IMK can be recovered by XORing the mixKey' with the stored dIMK. IMK = (mixKey') XOR (dIMK)