Questions tagged [password-hashing]

Irreversibly converting user-selected passwords into authentication tokens that can be safely stored e.g. in a user database. Typically done with a salted password-based key derivation function (PBKDF), ideally with a memory-hard mixing stage to thwart brute-force attacks using parallel hardware.

Filter by
Sorted by
Tagged with
2
votes
0answers
34 views

composing password hash functions

Firstly I know that what I'm asking about is not practical, so let's keep it theoretical. Let $B[H](x)$ be balloon hashing with $H$ as it's underlying hash. What happens if I do $B[H1](B[H2](x))$, ...
1
vote
1answer
81 views

Would it be any good to create a new cryptographic hash function?

Would it be beneficial to create a cryptographic hash function for more security. A cryptographic hash function is pretty much a pseudorandom string generating algorithm and it can easily be made ...
0
votes
0answers
36 views

Hashed password used for encryption and for user authentication at the same time

As I am fairly new to cryptography, I would like to understand how to, in a simple way, implement a system that would achieve the following: the user would have to setup a password, which would then ...
-2
votes
1answer
33 views

Problem understanding the difference between passphrase and keyfiles

Ok, so I have read a few different articles on subject and am maybe just just having problems understanding the point of view from the program I am using or maybe not IDK. Anyhow, ill get into it. ...
3
votes
2answers
105 views

Don't human generated passwords used with key derivation functions reduce the security of symmetric encryption?

The key size for AES is chosen as 256 because that's considered the minimum keysize which can protect against a brute force attack - i.e. $2^{256}$ tries. However, in practice, for a lot of ...
0
votes
0answers
43 views

Are there any best practices/recommendations for/against using client-side password hashing?

I do not mean generating a hash on the client side and then storing it in the database directly. I found a few questions with similar theme, but most of those answers assumed a scenario where ...
0
votes
1answer
56 views

Is server-side password strength validation possible with client-side password hashing?

Let's say I wish to setup a classic username & password authentication strategy on a server. All communication is encrypted via TLS. But ideally, I still do not want the server to be able to read ...
0
votes
1answer
45 views

Necessity of PBKDF2 in current Setup?

I have a single password which is random bytes that encrypts a database. Right now I am using an encryption scheme of https://gist.github.com/jbtule/4336842. To summarize, we take our one password, ...
0
votes
1answer
53 views

Use peppers with Bcrypt (HMAC + Bcrypt)

Is it useful to combine HMAC with Bcrypt ? If it so, should I do the HMAC on the password before "Bcrypt"ing it ? or should I do the HMAC on the Bcrypt output ?
1
vote
2answers
99 views

How does password_verify() function gets the salt from the password stored in DB?

I am creating a simple Sign up and Sign in form using PHP. At the sign up, I create hash using password_hash() function and then store it in the DB. At the time of Sign in, initially what I did was ...
0
votes
0answers
26 views

Is it possible to convert hashed password from one bcypt version to another?

I have passwords hashed using bcypt version \$2a\$ (e.g. "\$2a\$06\$...") and I want to convert them to version \$2b\$ (e.g. "\$2b\$06$..."). Is it possible to do that? If yes, are ...
1
vote
0answers
67 views

Estimated hardware cost to crack ARGON2ID hashed passwords

I can find a bunch of information on stuff like bcrypt and script, but I am interested in estimating the cost per hash on something like Argon2id that is GPU hardened. I am trying to do the best with ...
7
votes
3answers
3k views

Password hash contained '\x00' in middle, resulting in ValueError from bcrypt.hashpw

I have some code that accepts a password in string format, and hash it with SHA3-512 before passing it to bcrypt for hashing. However, by some coincidence, I found a test case that produces a hash ...
5
votes
2answers
574 views

7-Zip Encryption: Practical Effect of Lacking Salt

A previous discussion on Cryptography StackExchange leads me to understand that 7-Zip does not use salt to derive an encryption key from password to use its AES-256 encryption; that this is a ...
1
vote
2answers
163 views

Would hashing a password twice prevent naive attacks?

A common way of using MD5 or any other hashing algorithms to store passwords is to hash the password with a salt $$\text{hash}(\text{password} \mathbin\| \text{salt}).$$ This way, if an attacker wants ...
0
votes
1answer
94 views

How to generate different hash values for same files/messages?

I was generating HashValue for contents in the file. I want a different hash value every time I wanna generate even if the file is the same. I am using SHA256. For the same files, the hash value I am ...
1
vote
1answer
131 views

Do I need a salt for Scrypt if the data is client-side?

I have a web app, in which I am encrypting user data client side. Each client has their own password, which is used to derive an encryption key (via Scrypt) for encrypting their data. Since the data ...
4
votes
2answers
414 views

Why are leaf nodes hashed in merkle tree?

I was reading the following on Wikipedia, it appears that the leaf nodes are hashed. What are the benefits of this? Why is it done?. I fell like they are done so that they can be transferred securely. ...
0
votes
1answer
79 views

How do high hash rates affect hashed password security?

Given the increase in hash rate since the rise of numerous block chains, I wonder how this affects the security of many hashed password systems. Is a standard linux ...
0
votes
2answers
294 views

Match bcrypt hash with plaintext

I have a bcrypt hash: $2b$10$kn7yEh2nYiDqDYNY.hjiZOtASBKT9uO4KozbFWDW2XLYnW58nkpq and a list with given plaintext passwords. How can I get the password from the ...
1
vote
1answer
70 views

Do you use a salt when encrypting a password or just when hashing a password?

A password is used to connect to a database. This password is kept in a file. This password (therefore) needs to be encrypted. A program to access the aforementioned database needs (of course) the ...
1
vote
2answers
287 views

How long would it take all of the supercomputers or cloud computing on Earth to bruteforce a significantly long password?

I was arguing with a colleague who thinks that SHA256 (password + 64 character static salt) is "insecure." My argument is that nothing in cryptography is "secure," it's all a ...
0
votes
2answers
69 views

Is this method of salting effective?

So this is my first post on this forum, so bear with me if I sound stupid. I am creating my own web application with JavaScript and MongoDB. I am storing all user information in a Mongo table, and ...
1
vote
1answer
132 views

Can ECDSA signature signing and verification process replaces password hashed based login system?

ECDSA or DSA in general was to sign a message or data using private key and verify it using public key, if the attacker/imposter doesn't have the private key then they couldn't sign the message ...
0
votes
0answers
40 views

What is the purpose of hashing the identifier in the secure remote password (SRP) protocol?

In the secure remote password protocol version 6a, the identifier for the user, I, is hashed along with the salt and the password on the client. While I understand ...
2
votes
1answer
55 views

How do salt and initialization vector differ?

Reading through the NodeJS API docs I came across IV for the first time. From what I can tell it has the same role as a salt in password hashing? Are they equivalent?
3
votes
1answer
44 views

Industry standard recommendations for memory usage defaults for a password hashing function?

I've been looking around for any studies done on this topic with respect to memory-hard password hashing. I'm inclined to simply impose no extra overhead by default, to be honest, but I'd really like ...
0
votes
3answers
507 views

Why is SHA256/SHA512 not broken for shortish passwords

I don't get why SHA-256/SHA-512 hasn't been broken, at least for shortish (10-12 character) passwords It is perfectly plausible to pre-compute a password/hash-pair table using numerous very fast ...
-1
votes
1answer
585 views

Salt length in SHA-512 version of Unix crypt command

SHA-512 crypt specs reports that SHA-512 crypt uses 128bit salt. The FreeBSD/Linux password generation code builds the salt using 16 bytes random data (128bits) and then it translates the random data ...
1
vote
1answer
105 views

What weaknesses would SHA256 hash array building and hashing the result have for password storage?

You allocate a 1MB array. Salt the password (this is the only time the salt is used other than being stored at the end) and hash the password with SHA256 8 times. Place 31,250 copies (125,000 was ...
1
vote
1answer
224 views

Is this password-cracking challenge possible?

Taking a graduate computer security class, part of our current assignment is to crack 50 Unix md5crypt password hashes, due on Thursday, October 8th (in eight days.) I've managed to crack 49 out of ...
0
votes
0answers
50 views

What can be deduced/extracted from this local hash extracted from Windows Machine?

I'm new to cryptography. I've been experimenting with getting Windows hashes to see whether it's possible to reverse engineer. The following hash is what I got from my test laptop. What can you ...
3
votes
4answers
1k views

Could a fixed RSA encryption be used instead of a salt to prevent rainbow table attacks?

It's common to use a salt before hashing a password in order to prevent an attack by rainbow tables. Would it also work to encrypt the password for instance by RSA encryption - by a permanent RSA ...
2
votes
1answer
221 views

Difference between server salt and client salt?

Basically I am trying to understand the difference between server salt and client salt. I know that the client salt is used to make encryption harder for hackers, but I can't seem to grasp the concept ...
2
votes
1answer
127 views

How long would it take to calculate the hash of a password by hand?

Suppose one had no computer (or rainbow tables), but had access a pen and paper as well as all the necessary documentation for modern (best practice, not outdated) hashing algorithms and mathematical ...
0
votes
2answers
133 views

How do I calculate Base64 conversion rate?

Basically I need to have a base64 encoded signature that has to be 96 characters long. However, I do not know what length I need to have the signature at so when I encode it, it can be that exact size....
0
votes
1answer
903 views

Choose Argon2i or Argon2id for secure password hashing on a website? [duplicate]

I make a website with authentication. I have studied a lot of answers to these questions, but I still don't understand what is better and safer to use for a website: Argon2i or Argon2id? I know which ...
0
votes
1answer
123 views

How secure is a password generator that runs SHA256 on a passphrase

I was looking into how password managers work and it seems to me that they all store the passwords (albeit encrypted). How secure would a scheme be where the password manager always generates the ...
0
votes
0answers
38 views

AES with a longer key instead of key expansion? [duplicate]

What are the disadvantages of using AES-256 with 240-byte key (which scrypt/bcrypt/argon2/pbkdf2 can easily output) instead of an expanded 256-bit key? The only disadvantage I can think of is "no ...
6
votes
1answer
762 views

Does having a hash of a password jeopardize the security of plaintext that was encrypted with that password?

A malicious actor wants to decrypt ciphertext that was encrypted with a password. He also possesses the hash (bcrypt/PBKDF2) of that password. Does he have any significant practical advantage in ...
1
vote
0answers
4k views

Relation between Zoom id,password and join URL [closed]

We all are using zoom application for joining/hosting meetings in this corona virus period. As we create a meeting, a new id, password and a url is generated. Some real examples follow- Id: ...
1
vote
1answer
79 views

Hashing-Simple Hash and Merkle tree [closed]

Does the output hash of simple hash and Merkle hash are same for same data>>??
3
votes
2answers
148 views

Short term for "Purposely-slowed hash"

When Argon2, Balloon, scrypt, bcrypt¹, PBKDF2… are used for a password, we can call them password hash (for password storage) or password-based key derivation function (for use in encryption). But ...
0
votes
1answer
278 views

how many iterations of SHA3 (keccak256) hashing would be required to provide reasonable protection for the following data structure?

((A , B , C) , (D , E , F, G, H)) Where: A is 0x0-0xF, (1 of 16) B is 0x00-0xFF (1 of 256) C is an 8 digit integer D is a one of a list of one hundred words padded to 12 characters E is a one ...
0
votes
0answers
140 views

Argon2id benchmarks

Recently I've decided to publish a simple app that I am using for maintaining and storing sensible encrypted data on the cloud. https://www.microsoft.com/store/apps/9NSGBQSJ2HD6 The hashing is done ...
-1
votes
1answer
53 views

Do we still need Multi Level Password Hash if Brute Force is not a matter

I am developing a web application where user can SignUp and all that kind of stuff. I was doing some research about Hashing and Storing passwords in Database and came across this article. In this ...
2
votes
1answer
247 views

Does pepper *require* an HMAC?

Assume you are already given a properly-salted, password hash $X$ from some slow PBKDF (e.g., like Argon2id). Now, you want to apply some large (~256-bit) secret "pepper" $S$ to it before storing it ...
0
votes
0answers
18 views

Length extension attack in the middle help!

is it possible to insert the command that you want to execute in the middle of the md5 hash token already known?
0
votes
0answers
655 views

How to bruteforce password from HMAC-SHA256 hash (if you have the key)?

Short of creating one's own script / program, is there an existing, readily available way of iterating through a list of potential passwords to find which one corresponds to a hash (HMAC-SHA256), ...
0
votes
2answers
1k views

How to pad a 448 bit message for SHA256?

I recently implemented a very simple SHA256 hashing program in C++, since the SHA256 hash function's block size is 512 bits or 64 bytes, and messages less than that size have to be padded as per the ...

1
2 3 4 5