Tag Info

Hot answers tagged

2

As Trevis says, it's at least as safe: there's a simple reduction from the salted to the non-salted MAC, assuming the latter is secure in the standard "existential unforgeability under chosen message attacks". Assuming the adversary has full control of the salt, it also won't buy you anything security wise. In a slightly different setting, where the salt ...


2

Safe, yes, but it doesn't really give you anything. The only use for a salt is to mitigate precomputation attacks against a password. Since it is public, it gives you no extra MAC security. By the property of the MAC, no adversary can forge one without knowing the key, and by the security of your KDF (which includes the salt) no one should be able to get ...


1

Salts are generally stored in the database with the password. They shouldn't be timestamps, salts should be random values of 128 bits or more (though this may vary depending on the hashing scheme used.) Salts improve security by making brute force attempts single-use: a password of "password" is likely going to be used many, many times. If it's hashed ...



Only top voted, non community-wiki answers of a minimum length are eligible