>>105921206
> the hidden data is a string in a TPM or similar secure enclave
Yes, that’s what I was referring to.
And no, the definition of a password does not exclude “things stored in a secure enclave”.
It’s a password.
> “Maybe it’s a hash… that’s not a password”
It’s a password equivalent.
How long has it been since /etc/shadow was invented? It’s the same as the SAM database.
Passwords are also fundamental to the way kerberos works.
Same with smart cards: when you set up a smart card, it sets your password in AD to a random string, and the AD uses that to make kerberos work.
Then you use another password to decrypt the contents of your smart card. Or “pin”
I think the terminology is just to get around specifically worded legal or regulatory guidelines.
It’s passwords all the way down.
Without passwords, no existing programs or infrastructure would work.
> biometrics?
Your biometric identifiers unlock a password (usually in the TPM) and use that.
It’s the password you set up windows with.
Passwords are ancient, eternal, and essential.
Call it a “key” or a “pin” or a “code” if you will. Passwords will never go away, and definitely not on any rigorously mathematically proven system for some time.
The current schemes are just marketing trickery.
Remember microsoft’s syskey debacle?
