Hacker News Reader

Telegram doesn't use passwords...

Fine. They call it a passcode:

Wait, how are they turning the passcode into a 2048-bit key? Is this an RSA key? How do they ensure it's not factorable, etc.?

They probably just create the key and then encrypt it with the pass code, as people usually do in these cases.