comment updates

The keyid used as a salt in the shardIdents does not prevent rainbow table
attacks, since it's often anyKey (""). The obscure name combined with the
username does make rainbow tables unlikely to be useful though.

1 files changed, 1 insertions, 2 deletions

diff --git a/Types.hs b/Types.hs
index 459dcd1..020bd98 100644
--- a/Types.hs
+++ b/Types.hs
@@ -27,8 +27,7 @@ instance Show EncryptedSecretKey where
 instance Bruteforceable EncryptedSecretKey UnknownPassword where
 	getBruteCostCalc (EncryptedSecretKey _ cc) = cc
 
--- | Objects stored on a keysafe server are (probably) a shard of an
--- encrypted secret key.
+-- | An object in a form suitable to be stored on a keysafe server.
 newtype StorableObject = StorableObject { fromStorableObject :: B.ByteString }
 	deriving (Show)