Re: password cracking: one char at a time.

From: Saqib Ali (docbook.xml_at_gmail.com)
Date: 11/23/05

  • Next message: Saqib Ali: "Re: secure disposal of backup tapes"
    Date: Wed, 23 Nov 2005 09:54:12 -0800
    To: michael young <mhyoung@valdosta.edu>
    
    

    > What are salt bits?

    salt bits are just randomly generated value, that are used in
    generating the Hash of the password. This is especially usefull when 2
    or more users on a system have the same password. Without salt, their
    hashes would be same. With salt, the hashes are different. This makes
    password cracking a little but more complex.

    --
    In Peace,
    Saqib Ali
    http://www.xml-dev.com/blog/
    Consensus is good, but informed dictatorship is better.
    

  • Next message: Saqib Ali: "Re: secure disposal of backup tapes"

    Relevant Pages

    • RE: Values to use for a salt?
      ... some misunderstandings of salt, hashes, and HMACs (and maybe also plug ... hashes so that the same password doesn't always produce the same hash, ... prevent the attacker using a dictionary of pre-computed hashes. ...
      (SecProg)
    • Re: Hashed password secure?
      ... When not storing the salt and searching for it, ... So when you are using MD5 with a 16-bit hash, ... > hashes before concluding that the password is in fact correct, or 65,536 ... > second average to check whether a password is correct? ...
      (sci.crypt)
    • Re: Hashed password secure?
      ... >> would be comparing hash values of keyand this hash value ... The same goal is attained by key stretching. ... 64K independent hashes, perform 64K chained hashes, storing only the ... Of course normal salting, with stored salt, can also be ...
      (sci.crypt)
    • Re: Wie gehashte Passwoerter vergleichen?
      ... Der Salt des Hashes steht am Anfang. ... Bei cryptsind es 2 Zeichen. ... Bei linux-MD5 sind es glaube 9. ...
      (de.comp.security.misc)
    • Key generation question
      ... which currently takes a passphrase and hashes it using SHA256 ... to use RFC2898 for key generation. ... I know that neither the IV nor the salt need be ...
      (sci.crypt)