From d3323ab8e9e39bcb0a6493d33efa265073920a7d Mon Sep 17 00:00:00 2001
From: Joey Hess <joeyh@joeyh.name>
Date: Fri, 19 Aug 2016 12:41:31 -0400
Subject: comment updates

The keyid used as a salt in the shardIdents does not prevent rainbow table
attacks, since it's often anyKey (""). The obscure name combined with the
username does make rainbow tables unlikely to be useful though.
---
 Types.hs | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

(limited to 'Types.hs')

diff --git a/Types.hs b/Types.hs
index 459dcd1..020bd98 100644
--- a/Types.hs
+++ b/Types.hs
@@ -27,8 +27,7 @@ instance Show EncryptedSecretKey where
 instance Bruteforceable EncryptedSecretKey UnknownPassword where
 	getBruteCostCalc (EncryptedSecretKey _ cc) = cc
 
--- | Objects stored on a keysafe server are (probably) a shard of an
--- encrypted secret key.
+-- | An object in a form suitable to be stored on a keysafe server.
 newtype StorableObject = StorableObject { fromStorableObject :: B.ByteString }
 	deriving (Show)
 
-- 
cgit v1.2.3