Passwords are secret keys which human beings can memorize.

learn more… | top users | synonyms (1)

0
votes
2answers
118 views

AES: Guess Password using the unencrypted text?

I am using the same password for some encrypted files currently (I know this is bad practice, though), and I wonder whether an attacker could decrypt if one decrypted file fell into his hands.
0
votes
1answer
117 views

How to calculate the entropy of passwords? [duplicate]

Here is a cartoon about password entropy. http://xkcd.com/936/ I dont quite understand how the entropy is calculated in the cartoon assuming they are calculate correctly. But in general, I dont have ...
0
votes
1answer
93 views

Biometric authentication [closed]

I see in some “Authentication schemes with biometric” papers that those authors wrote a phase as password and biometric update phase. My question is that why we may needs biometric update phase? Is ...
0
votes
2answers
741 views

Deriving HMAC key and cipher key from passphrase? [duplicate]

I'm encrypting a file with AES-256 in CBC mode. I needed to add an HMAC for authentication and validation of the file contents and passphrase, so I used a SHA-256 HMAC over chunks of my file ...
0
votes
1answer
50 views

How do I control an access code safely?

Upon registration an user has to specify an access code of five digits. This access code is also used as a password for the encryption and decryption of certain strings. The user types in "12345" ...
0
votes
1answer
39 views

Value of S and r in Fiat-Shamir Protocol

In the book Cryptography and Network Security by Forouzan,in chapter 14, Fiat-Shamir protocol, its mentioned that two large prime numbers p and q are chosen and kept secret. However n=p*q is made ...
0
votes
2answers
113 views

General questions about cryptography for password security

I'm pretty new to this and find it quite interesting, but my brain won't process how it works so I have to ask some questions :) Why is cryptography used? Is it for extra security once the password ...
0
votes
0answers
72 views

How does multi platform encrypted cloud storage work?

I'm really interested in end-to-end encrypted cloud storage and couldn't find out how following scenario could work: A user of a cloud provider which provides zero-knowledge-authentication (like for ...
0
votes
0answers
35 views

How to determine which key derivation function used for password?

Suppose an attacker collected a password hash file. After performing rainbow tables/dictionary attacks they choose brute force attacks. So they try guessing as many passwords as they can by running ...
0
votes
0answers
77 views

Diceware word list for six dice

I really like Diceware, but it now needs six words to be safe. Instead of adding a word, I would think that increasing the size of the wordlist and adding an extra dice would be a better idea. I have ...
0
votes
0answers
43 views

Password generation/storage scheme

How bad is the following strategy for a password manager on a local machine? The user wants to sign up for somesite.com where he needs a password. The user has previously generated a secret key ...
0
votes
1answer
144 views

How many attempts does it take to crack a 32-bit password hash with this scenario?

How many attempts does it take to crack (match) a 32-bit password hash from a database of 4 million password hashes? Correct me if I'm wrong, but to crack a 32-bit password hash would take roughly ...
-1
votes
1answer
1k views

Store user passwords in database using Java Application

I want to store user's password details in Database. My project is in Java. I want to know the best way of storing passwords and other important information like user data.
-1
votes
2answers
196 views

What is the advantage of an attacker over breaking a 4 digits PIN?

When a hardware system is protected by a 4 digits password, what is the advantage of the attacker into breaking that system? Isn't it $10*10*10*10=10^{4}$? If $\frac{1}{10^{4}}$ is the cost of such ...
-1
votes
1answer
136 views

How do I cryptanalyze a password field?

In a PostgreSQL database, I can see the following fields in a table (for a specific record): User = administrator Password = "ceMv9Me6go" Now the following are true: The password length is not ...
-1
votes
2answers
78 views

Is there a client-side program to cryptography a HTML page and decode if correct password is writen? [closed]

I want to know if there is an easy way to do this: create a complete HTML page cryptography the text content (image is not important) ask user some password check the password with a cryptographed ...