On Thu, May 05, 2016 at 09:17:50AM -0400, Jan Harkes wrote:
> > The key in the database is also short
> > and is being used without strengthening, for backward compatibility.
> 
> No, it is using the exact same strenghtening as the Coda token because
> it happens under the covers during the RPC2 new connection handshake.
> 
> https://github.com/cmusatyalab/coda/blob/master/lib-src/rpc2/rpc2-src/rpc2a.c#L233

Indeed it is rehashed, nice. Thanks for pointing this out.
Still, this is 8 bytes.

Rune