Timeline for Mechanism of PBKDF in encryption key generation with passphrase
Current License: CC BY-SA 4.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 5, 2019 at 0:22 | history | edited | Squeamish Ossifrage | CC BY-SA 4.0 |
Clarify rainbow tables costs and parallelism.
|
| May 6, 2018 at 22:58 | comment | added | Squeamish Ossifrage | @MusséRedi It takes time for information to propagate across distances. If you have a cluster of computers that are not working completely independently, so they have to communicate, you have to power whatever apparatus they use to communicate for whatever time it takes for the information to propagate. That's in addition to the CPUs you have to power for computation, the RAM you have to power for storage, etc. All this is to estimate proxies for cost in euros or joules. Usually we model costs in the area*time metric. | |
| May 6, 2018 at 22:53 | comment | added | Squeamish Ossifrage | @MusséRedi Quantifying probabilities for passwords is difficult if you don't know the procedure (e.g., pick a sequence of 10 words independently and uniformly at random from the diceware dictionary), but if a human generated the password without assistance from a computer, probably ‘password’ is more likely than ‘silverfish’ which in turn is more likely than ‘hcjmlutvrt’. Whatever the distribution on passwords, the expected cost to attack a salted password-based key derivation function $H$ is greater by a factor of $2^c$ than the cost to attack the underlying salted hash function $H_0$. | |
| May 6, 2018 at 21:59 | comment | added | Mussé Redi | What do you mean with communication, as a measure for attack cost? | |
| May 6, 2018 at 21:57 | comment | added | Mussé Redi | By probability distribution of possible passwords, are you referring to that, for instance, the letter e is the most used in the English lanuage, giving its use in a password a higher probability? How could one infer a probability distribution on possible passwords, short of choosing its length and base/characterset? | |
| May 6, 2018 at 21:47 | history | answered | Squeamish Ossifrage | CC BY-SA 4.0 |