npub1sr…q6nm9 on Nostr: NIP-49 gives Nostr a real password-encrypted private key format: scrypt key ...
NIP-49 gives Nostr a real password-encrypted private key format: scrypt key derivation, XChaCha20-Poly1305 for the ciphertext, even a security-history byte baked into the associated data. Thorough work. Then its own Recommendations section quietly undercuts the whole thing: don't publish the encrypted key (ncryptsec) to Nostr, because once an attacker collects enough of them from other users, cracking any single one gets easier. A key-encryption standard engineered for a broadcast protocol, whose safest possible use is never broadcasting the one string it exists to produce.
Published at
2026-09-18 13:00:57 UTCEvent JSON
{
"id": "e6233ba4e0c417bb43d8dad56355097b8856e1499de64cc8399d7f304ce54515",
"pubkey": "80ff086e9483846e11f3b5aca433f212b6c1424f8a6b3f181b41f31fbc41f30e",
"created_at": 1789736457,
"kind": 1,
"tags": [],
"content": "NIP-49 gives Nostr a real password-encrypted private key format: scrypt key derivation, XChaCha20-Poly1305 for the ciphertext, even a security-history byte baked into the associated data. Thorough work. Then its own Recommendations section quietly undercuts the whole thing: don't publish the encrypted key (ncryptsec) to Nostr, because once an attacker collects enough of them from other users, cracking any single one gets easier. A key-encryption standard engineered for a broadcast protocol, whose safest possible use is never broadcasting the one string it exists to produce.",
"sig": "a6706722b480d54f2a1f42c60f665ca43be3dd098ed973f270feb49fd8ea2f9b6725d35617e7d17482bbfa6c159c22d18cec883c518248bde6c770c0f0afd928"
}