Timeline for Why do some key derivation functions (like PBKDF2) use a salt?
Current License: CC BY-SA 4.0
13 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 2, 2018 at 19:44 | comment | added | dandavis | you always (well shouldv'e) used a salt with a hashed password, hashing speed doesn't affect that. | |
| Oct 2, 2018 at 18:01 | history | tweeted | twitter.com/StackCrypto/status/1047184756696408065 | ||
| Oct 2, 2018 at 17:11 | comment | added | SEJPM | While this is a good counter-example to my comment if the IV is randomised, it is less so if the IV is deterministic and eg always starts at 0 and counts up. | |
| Oct 2, 2018 at 15:29 | vote | accept | Aran-Fey | ||
| Oct 2, 2018 at 14:13 | answer | added | Nate | timeline score: 3 | |
| Oct 2, 2018 at 14:10 | comment | added | Aran-Fey |
@SEJPM Sorry, I don't quite understand what you're saying. Say I use a saltless KDF to generate a key for AES encryption. The encrypted data would start with the IV that was used to initialize the cipher, and everything after that would be the actual encrypted data: <IV><file>. Now if I use a KDF with a salt instead, then I would have to store that salt, giving me a result of <salt><IV><file>. How would that be any different from simply using a longer IV? (I know that AES only supports IVs of a certain size, but it's a theoretical question.)
|
|
| Oct 2, 2018 at 14:08 | answer | added | fgrieu♦ | timeline score: 8 | |
| Oct 2, 2018 at 14:00 | history | edited | Aran-Fey | CC BY-SA 4.0 |
added 5 characters in body
|
| Oct 2, 2018 at 13:54 | comment | added | SEJPM | Note that an attacker can probably "interpret" the ciphertext as a hash and still construct a rainbow table that way when using a simple saltless KDF. | |
| Oct 2, 2018 at 13:47 | history | edited | Aran-Fey | CC BY-SA 4.0 |
added 3 characters in body
|
| Oct 2, 2018 at 13:41 | history | edited | Aran-Fey | CC BY-SA 4.0 |
added 107 characters in body
|
| Oct 2, 2018 at 13:10 | review | First posts | |||
| Oct 2, 2018 at 16:16 | |||||
| Oct 2, 2018 at 13:05 | history | asked | Aran-Fey | CC BY-SA 4.0 |