Re: my KDF vs dictionary attacks

Richard Herring wrote:
In message <13ucrp8lg88m003@xxxxxxxxxxxxxxxxxx>, David Eather <eather@xxxxxxxxxx> writes
Bryan Olson wrote:
David Eather wrote:
To anyone else: Seriously I want some feedback, was what I posted to difficult / confused / obscure etc. to be useful? Yes my email address if you prefer.
Giving a specific answer to a gibbering question is tricky business.
When the OP wrote, "the salt has 1 requirement, it must encrypt into a 32 character string, no more and no less, this means that the salt has a minimum of 5 digits and a maximum of 20 digits," did you understand what
he meant? I sure didn't.

I fell over that one as well.

What did you deduce from the weirdly precise

this provides 2^33.219279506322130890089774955278 salts

way of saying "slightly under 10^10"?


I just thought of all the many first year engineering students who insisted on setting power supplies to 5.000 volts and rounded of to 2^33
.

Relevant Pages

  • Re: my KDF vs dictionary attacks
    ... In message, David Eather writes ... to difficult / confused / obscure etc. to be useful? ... When the OP wrote, "the salt has 1 requirement, it must encrypt into a 32 character string, no more and no less, this means that the salt has a minimum of 5 digits and a maximum of 20 digits," did you understand what ...
    (sci.crypt)
  • Re: my KDF vs dictionary attacks
    ... the salt has 1 requirement, it must encrypt into a 32 character string, no more and no less, this means that the salt has a minimum of 5 digits and a maximum of 20 digits ... After you have the password and salt run the combination through a hash function many times, 1000 is a commonly used number but what you want is for this multiple hashing to take between .1 and 1 second and use the final result as the encryption key. ...
    (sci.crypt)
  • Re: my KDF vs dictionary attacks
    ... When the OP wrote, "the salt has 1 requirement, it must encrypt into a 32 character string, no more and no less, this means that the salt has a minimum of 5 digits and a maximum of 20 digits," did you understand what ... dictionary maps final hashed values back to input passwords. ... If the dictionary is just input phrases, then key stretching increases ...
    (sci.crypt)
  • my KDF vs dictionary attacks
    ... the salt has 1 requirement, it must encrypt into a 32 character string, no ... maximum of 20 digits ...
    (sci.crypt)