Re: MD5 for passwords

"Ivan Voras" <ivoras@xxxxxxxxxx> wrote in message
news:eiapss$4ac$1@xxxxxxxxxxxxxxxxx
Hmm, wouldn't iterating any hash function 10000 times on a password just
lessen the (already weak) entropy present?

If that is considered a risk try
IV = salt
10000 times
IV = HMAC-MD5(password, IV) //(data, key)
store IV

It will still be insanely fast, but it is easy to prove that the final
iteration has access to all the entropy, so you'll get at most the entropy
loss of a single round. This should be good enough for most purposes, and
tightens up the security proofs a bit more.

The additional window of opportunity to connect and read out the password is
so small that I feel it can be ignored, there are easier, more dependable
opportunities other places.
Joe


.

Relevant Pages

  • Re: Dependency in the output of a hash
    ... For this kind of approach it is worth thinking of a hash function as an entropy distiller, it simply distills the entropy from the inputs into a fixed size. ... the entropy content of the final hash will be driven by the password with the salt only functioning in a minimal way to change the output. ... Also Carsten is correct, lots of iterations, 10,000, 100,000, even a million iterations. ...
    (sci.crypt)
  • Re: Dependency in the output of a hash
    ... Does it matter what the entropy ... Does any kind of vague concept of dependency even make sense ... password with the salt only functioning in a minimal way to change the ... Also Carsten is correct, lots of iterations, 10,000, 100,000, even a million ...
    (sci.crypt)
  • Re: Lizard engines and rat engines
    ... I need to do a lot more reading and thinking about entropy. ... into disorder can be prevented only by the expenditure of free energy. ... Consider a grain of salt. ...
    (sci.bio.evolution)
  • Re: What is encryption in RIP Act?
    ... Any encryption program worth its salt will produce the same entropy as a randomly chosen sequence. ...
    (uk.legal)
  • Re: Solubility
    ... S, and since the dissolved salt is more disordered, salts are generally more ... soluble at higher temperatures. ... It is the entropy ...
    (sci.chem)