Obfuscate the salt and take it into use

[TimvanSteenbergen]

Problem:

• encrypted data is vulnerable to multiple ways of getting unauthorized decrypted, when all parameters are known. When someone gets hold of the userData, this might happen.

Solution:

• obfuscate the salt
• keep the salt separate from the userData. Maybe in a separate localdata/eternalCookie/inMemoryParameter.
• do not show the salt onscreen at any time.

Priority:
low since it won't be a problem until many people use opfes