Questions tagged [password-hashing]

Irreversibly converting user-selected passwords into authentication tokens that can be safely stored e.g. in a user database. Typically done with a salted password-based key derivation function (PBKDF), ideally with a memory-hard mixing stage to thwart brute-force attacks using parallel hardware.

Filter by
Sorted by
Tagged with
0 votes
0 answers
21 views

Question Cyber Security [closed]

How does the size of the input message affect the computational complexity of generating the hash value? (This is a question I have at university)
nizar's user avatar
  • 1
-1 votes
1 answer
58 views

Is security of Manuel Blum's Mental Hash function dependent on Security Through Obscurity for it's effectiveness?

I have been practicing using Manuel Blum's Mental Hash Function for personal use, described in the link below: Mental Cryptography and Good Passwords However, Rob Shearer has shown that the function ...
its.just.me's user avatar
0 votes
0 answers
25 views

User-friendly tutorial In JohnTheRipper (JtR) for beginners? [closed]

I have been struggling to understand the format in JtR. I am a pentesting student and trying to do a customized wordlist rule. How do you dictate the order of the password. like how do you tell the ...
TorJaks669's user avatar
1 vote
1 answer
112 views

What is the purpose of making salted passwords public?

So I was reading through an article about how passwords are salted and hashed through a cryptographic function here, and found out that hashed passwords, along with the plaintext salt values are ...
mantot123's user avatar
14 votes
5 answers
9k views

Boss insists on storing SHA2(p) || SHA3(p), claiming it "doubles security"

My friend in the software industry came to me with one of his "dumb boss" war stories. This particular time, his (non-technical but eager to learn) manager came to him and told him to, in ...
squinged's user avatar
  • 143
2 votes
0 answers
89 views

Why does Argon2 truncate BLAKE2b outputs?

The Argon2 variable-length hash function uses BLAKE2b directly if the user requests an output less than or equal to 64 bytes in length. However, if the user requests an output longer than this, each ...
samuel-lucas6's user avatar
1 vote
0 answers
24 views

Argon2 confusion when computing J_1 and J_2

I'm implementing Argon2id from the RFC 9106 and I'm at the part where each thread computes J_1 and J_2 in order to generate indices [l] and [z]. I'm confused as to which TYPE (y = 0, 1 or 2) of Argon2 ...
Kevin Stefanov's user avatar
0 votes
0 answers
54 views

Is it secure to encrypt an authentication token using another possibly hashed authentication token?

I'm working on a web app ("main") which acts as a central access hub for several other web apps ("children"). The users are supposed to authenticate in the main app, resulting in a ...
Alex F's user avatar
  • 101
0 votes
0 answers
82 views

How is Blowfish not reversible when it contains the salt in the hash? [duplicate]

I'm learning PHP and I've come to the password hashing section of a course I'm following, but it's not explained well enough for my liking. It seems that when using the crypt function, and using the ...
cameron6's user avatar
2 votes
1 answer
160 views

Password Manager Architecture and Design

I'm working on a local, client-side password manager. I want to hash a master password with argon2 to store it safely in an SQLite database. This will be how a user could login and be authenticated. (...
dvub's user avatar
  • 123
0 votes
0 answers
65 views

Can you have a public password file that is still secure?

So I’ve been reading about different ways to store passwords on servers (plain text, encrypted, hashed, hashed + salt, slow hash + salt) and I wanted to find a way where a leak of the stored passwords ...
Beacon of Wierd's user avatar
1 vote
2 answers
3k views

How weak is using AES with a 128 bit key but 64 bits of the secret key are public constants?

Respected community, I was wondering how weak would AES-128 be, if we provide only a 64 bit key with the other remaining 64 bits either zero bits or public constants, known to the attacker. Is it easy ...
Aravind A's user avatar
  • 1,020
7 votes
0 answers
258 views

Who invented salt, and why is it called salt?

I'm looking for an authoritative reference about the history of salts in the context of hash functions. Why is the personalization string in a hash function called a "salt"? Who should be ...
Mikero's user avatar
  • 13.3k
3 votes
3 answers
145 views

Generating Complex Passwords from (Non-)Memorable Phrases - Need Advice

I've been thinking about creating strong and unique passwords for my online accounts, but I also want them to be memorable. I've come across the idea of using a memorable passphrase as the basis for a ...
user7113370's user avatar
0 votes
1 answer
868 views

When trying to break a PBKDF2 SHA512 hash, how fast is an RTX 4090 or similar GPU with the given parameters

I'm writing a paper for uni about password security, specifically about cracking passwords in the context of a password manager. I've coded a password encryption scheme which uses PBKDF2(SHA512) to ...
Luka Gecko's user avatar
2 votes
1 answer
67 views

Can limited password/PIN length be compensated by a computationally intensive hashing function?

Say we have a very limited password space with only a 4 digit PIN, so only 10000 PIN possibilities. Say also that the attacker has access to the stored form of the PIN. Can breaking the PIN be made ...
hunger's user avatar
  • 123
0 votes
1 answer
223 views

How many bits should change in a password salt?

In https://crypto.stackexchange.com/a/27828/79037, it's indicated that one can "save space" by using something globally-unique, like an application-wide "pepper", together with ...
ManRow's user avatar
  • 343
6 votes
1 answer
305 views

Cache-hard or memory-hard password hashing algorithms?

bscrypt is a cache-hard password hashing algorithm/KDF from Steve Thomas (aka Sc00bz/TobTu), who was on the Password Hashing Competition (PHC) panel. He argues it is better than the alternative ...
samuel-lucas6's user avatar
2 votes
1 answer
49 views

Is hashing salt possible even with the password with salt appended to the end?

Should you hash the salt on its own ? Is that possible? for example being password with salt appended at the end hash(pass || salt) and hash(salt) in a password file?
Bus's user avatar
  • 21
3 votes
1 answer
161 views

Is it possible to sign in to a website using two different passwords using an MD5 hash collision?

I wanna do an experiment. I wanna see if it's possible to sign in to an outdated website that still uses MD5 to store passwords (there are surprisingly still a lot) with two different passwords. For ...
Domino's user avatar
  • 31
3 votes
1 answer
93 views

Can using an unknown, non uniform random salt increase difficulty for password attacks?

I remember reading a previous stack exchange post (unfortunately was unable to find the link, if someone knows the link that would be great!) about a method to make password checking time for the ...
Manu Bhat's user avatar
0 votes
2 answers
332 views

Is sha3 a one-way funtion

If i store sensitive stuff (e.g passwords, salted passwords, Internet protacel adresss(so i know its not tamperd with), private keys(the keys are using a portion of the key on multiple disks in ...
Downvoter's user avatar
1 vote
0 answers
44 views

Store the password hashing salt on a separate server to slow down evaluation?

GPUs or dedicated hardware can calculate most things much much faster than regular computers ever could. There are password hashing algorithms such as scrypt and argon2 that make the difference ...
n-l-i's user avatar
  • 445
0 votes
1 answer
72 views

Use name as the initialization vector to encrypt passwords for users

I'm using AES-256-CBC to encrypt password for a set of users, and for each user in the database we gotta generate and store the password in the database. The ...
troubleddev's user avatar
29 votes
4 answers
7k views

Is there a hash function that's more expensive for an attacker than for the server?

Say a server wants to hash a password $p$. It would use a secure hash function $H$ and a unique salt $s$ to hash the password as $H(p,s)$. If one has access to the salt, each password candidate ...
n-l-i's user avatar
  • 445
1 vote
2 answers
113 views

Remembering user credentials by double-hashing

I'm developing a desktop application where the users will login with username and password, which is then verified against a database. After the initial login, the current user should be automatically ...
Anlo's user avatar
  • 113
0 votes
0 answers
1k views

How can I decode the salt of this argon2i passwordhash?

I have this password hash: $argon2i$v=19$m=128,t=2411,p=2$hmJvvpH3BZlvb2V1vLm/yf3zANU4qNpKuw5TBnGzo2I$<censored>. I know the password, and I want to verify if ...
trieulieuf9's user avatar
1 vote
1 answer
110 views

Does a salted password hash reveal info about the password?

Assume a password is hashed with a secure salt, e.g. hash = sha256(password+salt). If the hash and the salt are made public, an attacker can perform an attack by ...
n-l-i's user avatar
  • 445
3 votes
1 answer
207 views

How is the Unix / PostgreSQL crypt function a trapdoor function?

I am looking at this in the context of password hashing in PostgreSQL, specifically, the crypt function of the pgcrypto ...
ahron's user avatar
  • 133
2 votes
1 answer
443 views

Hashing a random string of letters upper/lower + numbers 256 characters long with SHA256

Is hashing a pseudo-random generated string of letters upper/lower + numbers 256 characters long with SHA256 insecure, in the sense that in any reasonable amount of time you can go from hash to ...
rubixibuc's user avatar
  • 225
1 vote
0 answers
66 views

Custom key for key wrapping using JOSE/JWK

I am trying to figure out how to use a custom password with a JWK that uses the password for key wrapping. The JWA spec contains for example "PBES2-HS512+A256KW", which does "PBES2 with ...
enzian's user avatar
  • 121
4 votes
2 answers
565 views

Does combining multiple PBKDF2 keys result higher iteration count when using same password but different salts?

I did some experimenting with web subtle crypto. I derived a key using PBKDF2 with SHA-512 and 100 000 iterations and timed it. Doing same with 200 000 rounds doubled the time as expected. Then I did ...
Puruporo's user avatar
3 votes
1 answer
1k views

Why does SHA-256 have any to do with scrypt?

I was reading the Wikipedia page for scrypt because I wanted to learn more about it and I came across their pseudocode for the algorithm. What confused me was the following line: I don't understand ...
Darcy Sutton's user avatar
1 vote
1 answer
135 views

Can salt just be appended to the password before hashing?

I am currently developing the back end of a website for one my projects and needed to store passwords. I knew that I needed to store passwords with salt, and my initial approach was to just generate ...
Darcy Sutton's user avatar
3 votes
1 answer
340 views

Using Argon2, can I improve the salt join the password Argon(password,password+salt)?

I'm creating an application where I'm going to use Argon2, I'm going to have a password, and I'm going to use as salt: email+name+date of birth, you must think that my salt is silly because name and ...
JRCDEV's user avatar
  • 33
3 votes
2 answers
1k views

Password Hashing based on Common Passwords

If an attacker has a database of 1,000 users' hashed passwords which are hashed with SHA-256 with a 128-bit salt and all of these users used 10,000 common passwords. How many hashes will the hacker ...
CryptoGuru's user avatar
0 votes
2 answers
279 views

Argon2 derive two keys from one password

This is not a duplicate, I'm asking which method is better. I generate an encoded argon2 hash string, so it'll be stored in database to verify login passwords. Saved encoded hash has salt of length ...
koala's user avatar
  • 1
1 vote
2 answers
248 views

Hashes to passwords with PBKDF2

If an attacker wants to hack the passwords of $2^{10}$ users. And all of these users generate a password from the space of $2^{50}$ passwords** and each password is hashed with PBKDF2 with $2^{10}$ ...
CryptoGuru's user avatar
1 vote
0 answers
90 views

How many hashes to recover a salted password? [closed]

If a password p is selected from a space of 2^64 passwords, and the server stores this as a hash, h = SHA-256(p||s) where s is a random 128-bit salt. How many maximum hashes would an attacker need to ...
CryptoGuru's user avatar
1 vote
2 answers
244 views

How much computation it takes to crack a PBKDF2's secret salt when the passphrase meterial has been leaked

Given the following code, extracted from a Bip39 implementation for Android by Zcash ...
zjmo's user avatar
  • 123
1 vote
1 answer
406 views

KEY using AES-128, If P is less than 128 bits, padded with 0 and create 128 bits, any problem if average pw length is 6

For communication between the client and the website, use password (P) as the key using AES-128. If P is less than 128 bits, it is padded with 0 to create a 128 bits key. is there any problem with ...
lmmd1234's user avatar
1 vote
1 answer
1k views

Best hash for PBKDF2?

I have a my own PBKDF2 automated implementation that automatically salts the hash. The output looks like this: ...
Engo's user avatar
  • 11
2 votes
1 answer
335 views

Is it safe to initialize a random number generator with MD5?

The MD5 algorithm is no longer considered secure for most applications of a hash algorithm. However, is it safe to initialize a PRNG via a password? If it is not, how could it be exploited?
Begoña Garcia's user avatar
1 vote
1 answer
75 views

Can a cryptographic hash function that outputs a c-membered subset of the n-membered set?

Is it possible that there is a cryptographic hash function that outputs a c-membered subset of the n-membered set? In other words, can the set of the binary representation of c-membered subsets of the ...
ali alizade's user avatar
1 vote
1 answer
253 views

Is it possible to bruteforce a 200 bit hash generated with PBKDF2, in which the first 160 bit are known?

As some password manager, such as KeyPassXC allows a user to create a master password using a HMAC response from a YubiKey concatenated with a password entered by user, I was wondering something. ...
romes's user avatar
  • 11
1 vote
0 answers
1k views

What should argon2id parameters be

I plan to use it locally on mobile devices. These seems to do not offer computational power as good as on a server. So what could be a secure argon2id parameters that run around 1s since offline apps ...
Kim Mỹ's user avatar
  • 165
6 votes
2 answers
2k views

How to prove that both people know the same dictionary word?

What would be a way to prove that both you and I know the same dictionary word? If we both hashed the word, then we could compare the hashes, but anyone who saw the hash could find the original word ...
asdf3.14159's user avatar
1 vote
1 answer
121 views

Will increasing timecost , memorycost , parallelism in argon2ID increase security in general?

currently I am using parameters for argon2ID in terms of timecost , memorycost , parallelism higher than what is recommended in RFC9106 https://www.rfc-editor.org/rfc/rfc9106.html for increased ...
ANISH M 18CS006's user avatar
1 vote
2 answers
474 views

Argon2id creating key for cryptography, how acceptable is it to use the same salt for the same encryption operation?

Everyone knows Argon2id is a slow hashing algorithm, and that's on purpose, all is good. When creating an Argon2id object a lot of parameters are needed to be taken into consideration ultimately ...
Elie-M's user avatar
  • 23
0 votes
1 answer
60 views

Can the indistinguishability obfuscator leak the password when obfuscating the password checking function?

Suppose I have a dumb password checking function: def dumb_checker(password): return password == "my_secret_key_that_should_not_be_revealed" One can ...
mercury0114's user avatar

1
2 3 4 5 6