don't use IV as puzzle after all

Not a good idea to use IV, because all the parts of the IV that are 0
will not obscure the data in the first block at all.

Instead, sha256 the password to generate the IV, and keep the puzzle as
part of the key.

1 files changed, 1 insertions, 1 deletions

diff --git a/keysafe.hs b/keysafe.hs
index d6c8792..5179994 100644
--- a/keysafe.hs
+++ b/keysafe.hs
@@ -53,7 +53,7 @@ retrievedemo = do
   where
 	go _ [] = error "decryption failed"
 	go esk (kek:rest) = do
-		print (keyEncryptionKey kek)
+		putStr "."
 		hFlush stdout
 		case decrypt kek esk of
 			-- TODO: verify checksum to avoid false positives