Read the article before commenting.
back
1 comments
I did. I assume you are referring to "your PIN isn’t recoverable if you forget it".
There's a difference between "not recoverable to a Signal user" and "nobody is able to brute force it if they get access to the cloud data".
So what i'm curious about is, how can this be? If you have lost your device (and thus all the keys stored in the signal app/phone), how can they store just a single pin while at the same time being able to prevent it to be recovered/brute forced (since it only has to be 4 digits)?
> Signal PINs are based on [Secure Value Recovery], which we previewed in December, to allow supporting data like your profile, settings, and who you’ve blocked to be securely recovered should you lose or switch devices.
[Secure Value Recovery] https://signal.org/blog/secure-value-recovery/
> All of this adds up to a secure enclave that limits the number of recovery attempts that are possible against a value synchronized across nodes in hardware-encrypted RAM.