Hacker News new | past | comments | ask | show | jobs | submit login

> 100 one-time keys (OTKs) on your server

Is 100 a safe default for devices with limited memory, or are there other more salient constraints that I'm ignorant of?




Each OTK is a Curve25519 key (or ed25519 key, i forget) - so 32 bytes. So 100 takes up 3.2KB of storage on each client for the private keys, and the same on the server for the public keys, so it's not a big concern :) We could do bigger pools, but it's just punting the problem.


With 1 million users all doing this, it's 3.2GB.

100 seems like a reasonable middle-ground between "that's a lot of storage to address a rare edge case" (e.g. say this was 3.2TB) and "most people will never need 10".




Consider applying for YC's W25 batch! Applications are open till Nov 12.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: