Re: Encrypting passwords stored in memory

From: Luc The Perverse (sll_noSpamlicious_z_XXX_m_at_cc.usu.edu)
Date: 09/20/05 

Date: Mon, 19 Sep 2005 20:11:13 -0600

"Miroslav Stampar" <miroslav.stampar@gmail.com> wrote in message
news:1127170504.922122.307190@g43g2000cwa.googlegroups.com...
> My suggestion is that you can use some hash function(MD5, SHA1,...) to
> store only password's hash values in memory. So, you don't have plain
> passwords in memory, and when you have to verify entered password you
> can use:
> if HASH_FUNCTION(entered_password)==stored_hash_value_of_real_password
> then
> OK
> else
> NOTOK

You still have to collect the password initially and hash it. This requires
that it be put in memory. 

-- 
"Wise men talk because they have something to
say; fools talk because they have to say something." - Plato

Relevant Pages

  • Re: hash table size
    ... talking about chess programming ideas and what they do rather than actually ... you can clear out the memory. ... Just a couple cycles per hash check. ... The amount of physical memory each user gets is likely to be somewhat ...
    (rec.games.chess.computer)
  • Re: Workaround with Remoting in CF
    ... > else you can store it in the Application Cache. ... >> I need a hash table in memory and clients accesing to it. ...
    (microsoft.public.dotnet.framework.compactframework)
  • Re: Parsing Large Files
    ... This gives me the hash %id which is keyed by ... Since you want to have the Y and X, store ... It is easier to sort in memory than ... to sort files from perl. ...
    (comp.lang.perl.misc)
  • Re: hash table size
    ... Change all the hash keys so you get a new random value. ... This way old entries from the previous search (or uninitialized hash memory) ... It is true that doing an AND is faster than a modulo. ... If you are runing a chess program for a reason, ...
    (rec.games.chess.computer)
  • Re: Firewall vs. IPS - Differences now (ISS, Intrushield 2.1?)
    ... > You risk running out of memory. ... That's like saying "it's trivial to DoS Aho-Corasic if you know the ... DoS's and improvements via use of the Jenkins hash are most illuminating. ... > replacement policy gives the worst behavior since an attacker can flood ...
    (Focus-IDS)