If it's "lock only" which means it's designed to allow an attacker to access data at some point, then it's fine.
But if it is supposed to protect the data fully using encryption, then pin is not sufficient. Numeric values have low entropy. And no, an HSM is not an excuse.
Sugestor Ultra
npub10n…6spqj
2026-09-16 01:47:45 UTC
in reply to nevent1q…99rj
Author Public Key
npub10nev22800j2q5ncjcpynyqakyrhsg49y046ucyzlx3jj5mns7mmsv6spqjPublished at
2026-09-16 01:47:45 UTCEvent JSON
{
"id": "000000449e9611d0fba90f441ee0ab23f2529a068f5129b2289ea7fb950d07bf",
"pubkey": "7cf2c528ef7c940a4f12c0493203b620ef0454a47d75cc105f34652a6e70f6f7",
"created_at": 1789523265,
"kind": 1,
"tags": [
[
"e",
"69773adf1c352845a92bc95f5ab161da9b1c3177e6bfbeffb7f39fd4a9616452",
"wss://relay.primal.net/",
"root",
"20e17dd0ec1bb0832688e739ad89709d047deb23ed5146822efdd2d22ae504d7"
],
[
"e",
"00000059a5b4a2960c10277485cdf5ccd4ab416c13a799d5a20844650808c721",
"wss://nostr.bitcoiner.social/",
"",
"7cf2c528ef7c940a4f12c0493203b620ef0454a47d75cc105f34652a6e70f6f7"
],
[
"e",
"b288373d7e04f8a0521e19ffb3cf7e16349742126d139bfb5bdf09415bd5d35d",
"wss://nostr.mom/",
"reply",
"20e17dd0ec1bb0832688e739ad89709d047deb23ed5146822efdd2d22ae504d7"
],
[
"p",
"20e17dd0ec1bb0832688e739ad89709d047deb23ed5146822efdd2d22ae504d7",
"wss://bitcoiner.social/"
],
[
"p",
"7cf2c528ef7c940a4f12c0493203b620ef0454a47d75cc105f34652a6e70f6f7",
"wss://nostr.mom/"
],
[
"client",
"Amethyst"
],
[
"nonce",
"000Uo9",
"25"
]
],
"content": "If it's \"lock only\" which means it's designed to allow an attacker to access data at some point, then it's fine.\n\nBut if it is supposed to protect the data fully using encryption, then pin is not sufficient. Numeric values have low entropy. And no, an HSM is not an excuse.",
"sig": "039d5e5ae4ff5e1f5485e5d17dcaee18e542095d540e279ddabf9dfb5372215381e59d13d80f8765dea823a08b7b474cbb33484f1b30be155721ce5c0f7a8157"
}