Privacy and Surveillance
boosted
My most recent project has been self-documenting cryptography, which seeks to make password hashes traceable or useless.
The basic idea is to add "this password is for Acme Corporation, Inc." onto the end of every password, automatically and outside the control of the user, before it is hashed.
The goal is to adversarially embed an organization's name and contact information into their password hash function, so that in order to be able to crack a password hash, you must know where to report it as stolen.