Re: my KDF vs dictionary attacks

Antony Clements wrote:
"Bryan Olson" wrote:

Then the key space is the pass-phrase space. You had included the
salt space, but the pass-phrase gives away the salt. That's why
salts are normally not encrypted; there's no real point.

how can the passphrase give away the salt when the salt is created by an RND and the pass-phrase is user generated?

Decrypt it, same as the user would, with the pass-phrase.

i know that the maximum keyspace is 2^512, what i don't know if that remains static irrespective the length of the keystream

and i still dont have an answer as to how the KDF would fare against a dictionary attack, not the twofish key proceedure, the actual KDF which i posted for you to peruse

Have you figured out why that is?


--
--Bryan
.

Relevant Pages

  • Re: Password storage facility exe - how safe is this idea?
    ... phrase of at least 15 characters and a passcode. ... A salt doesn't have to be secret, and should not be created by the user. ... Or, you could always call out to DPAPI, to encrypt the password data using ... they can't just change the pass-phrase in there and use the ...
    (microsoft.public.dotnet.security)
  • Re: my KDF vs dictionary attacks
    ... does not need to be secret, with the sbox that i have, if the salt is known ... to the attacker, the encryption sequence becomes useless, i can elaborate on ... to the pass-phrase that induced it. ... within a dictionary table consisting of 2^512 entries of 512 bits, ...
    (sci.crypt)
  • Re: my KDF vs dictionary attacks
    ... salt space, but the pass-phrase gives away the salt. ... how can the passphrase give away the salt when the salt is created by an RND ... dictionary attack, not the twofish key proceedure, the actual KDF which i ...
    (sci.crypt)
  • AE implementation scheme for multi volume files
    ... volume files *using a single user provided password*, ... sample enthropy from the system to generate an unique salt ... write the volume header, declaring how to configure the application ... initialise the AE function (using a robust standard kdf, ...
    (sci.crypt)
  • Re: A question on an article dealing with pass phrase and keys
    ... In the section Keys vs. Passphrases He mentions using a hashing ... routine to change a pass phrase in to a key. ... provided passphrase with a random salt. ...
    (sci.crypt)