All Questions
Tagged with password-hashing sha-1
5 questions
1
vote
1
answer
280
views
Is it possible to bruteforce a 200 bit hash generated with PBKDF2, in which the first 160 bit are known?
As some password manager, such as KeyPassXC allows a user to create a master password using a HMAC response from a YubiKey concatenated with a password entered by user, I was wondering something.
...
- 11
1
vote
2
answers
292
views
Losing entropy after re-hashing a hash
Suppose you have a string AAA that was hashed with SHA1 to produce 606ec6e9bd8a8ff2ad14e5fade3f264471e82251.
If I rehash ...
- 177
6
votes
1
answer
4k
views
Is PBKDF2/RFC 2898 broken because SHA1 is broken?
I was attempting to re-implement the ASP.NET Identity password hash algorithm in PHP. It uses RFC 2898, which uses HMAC SHA1. SHA1 has been broken by google. Does this mean that RFC 2898 in general ...
- 163
5
votes
1
answer
726
views
Upgrade password hash in an existing system: Pbkdf2( salt , OldSha1Hash )
Background [Updated]
Consider a situation where a website was created over a decade ago and user account password storage was done by storing SHA1(password) into ...
- 349
5
votes
2
answers
3k
views
Is the SHA1 hash of MD5 hash of a password secure?
Cryptography is not my area, so pardon me if the question is annoying.
Some time ago, I implemented an Internet site, which database had a users table. To keep the password in its user table field, I ...
- 151