Is ncryptsec (NIP-49) secure?

[alexgleason]

• NIP: https://github.com/nostr-protocol/nips/blob/master/49.md
• Code: https://github.com/nbd-wtf/nostr-tools/blob/master/nip49.ts

A few people have implemented this. Now I am going to implement it too. But first I want to know if it's still considered secure.

For instance, does it matter if SYMMETRIC_KEY is uniformly random? Is it "randomly uniform"?

SYMMETRIC_KEY = scrypt(password=PASSWORD, salt=SALT, log_n=LOG_N, r=8, p=1)

[vitorpamplona]

I hope it is because otherwise my main key is out there in so many ways... :)

[mikedilger]

scrypt is password based key derivation. So the output should be good keying material.