Tagged Questions
1
vote
1answer
109 views
Hashing a password with SHA256 on the client then bcrypt on the server
I'm trying to implement a cryptographically secured storage site (not Mega, or anything similar) and am trying to prevent the user's password from ever touching the server. The password is used to ...
1
vote
1answer
173 views
Can iterated key expansion in Blowfish slow down bruteforce attacks on small key sizes?
Suppose I have to use 64-bit keys for encryption (e.g. to comply with export restrictions). For this question, assume this key is truly random, and the encryption algorithm is Blowfish.
Blowfish key ...
1
vote
1answer
192 views
Blowfish Encryptions in Bcrypt hashing algorithm
I am trying to understand the ExpandKey function used in the bcrypt hashing algorithm. As per the documentation of bcrypt hashing algorithm on USENIX here:
...
8
votes
1answer
292 views
Can one efficiently iterate valid bcrypt hash output values?
bcrypt is an intentionally slow hash algorithm. In my last protocol idea, I wanted to use it to expand a password and then only transfer the bcrypt-hashed password.
An efficient attack on this would ...
