A message from our CEO about the future of Stack Overflow and Stack Exchange. Read now.

Questions tagged [password-hashing]

Irreversibly converting user-selected passwords into authentication tokens that can be safely stored e.g. in a user database. Typically done with a salted password-based key derivation function (PBKDF), ideally with a memory-hard mixing stage to thwart brute-force attacks using parallel hardware.

13 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5
votes
0answers
84 views

How would quantum computers affect password based encryption?

At first glance: Assuming that the output of the password hashing function is large enough, quantum computers should have no effect on password encryption as on symmetric cryptography in general. Is ...
5
votes
0answers
594 views

Argon2 - memory setting - lower bound?

(I realise this is yet another Argon2 "how do I configure" question, but the existing questions I've found don't really help. If I've missed one, happy to have this closed). Deploying Argon2 (with ...
4
votes
0answers
85 views

Upgrading key derivation by adding a XOR with a known value

In general keys for password based key derivation are derived from a password hash such as the old PBKDF2 function or Argon2, possibly followed by another derivation function to derive data and ...
4
votes
0answers
498 views

Password hashing in embedded systems

Are there good options for password hashing in embedded systems? These systems often cannot afford slow hash functions. I can think of a few approaches: Store the (hashed) passwords in a HSM that ...
3
votes
0answers
97 views

Fixed vs variable memory access pattern in password hashing

What are, quantitatively, the pros and cons of fixed versus variable memory access pattern in Password-Based Hashing, Entropy-Stretching Key Derivation functions, and Proof-of-Work applications? ...
2
votes
0answers
92 views

Secure hashing when the input comes from a small space

I have a problem that I'll simplify here. Let's say I want to store a table of {person, fav color}. Only, I don't want anyone to ever be able to look up a person't favorite color; the only thing ...
2
votes
0answers
64 views

Did “The Catena Password-Scrambling Framework” make an error in the reduction of its pseudorandomness?

I was reviewing the most recent version of the Catena paper and they made some claims that I find questionable in their reduction of the pseudorandomness of the output of Catena (p. 32). First I will ...
1
vote
0answers
31 views

Clarification of NIST Digital Identify Guidelines and “Pepper” in Password Hashing

For password hashing the NIST Digital Identity Guidelines state In addition, verifiers SHOULD perform an additional iteration of a key derivation function using a salt value that is secret and ...
1
vote
0answers
60 views

Password manager that uses a mix of long and short key derivation functions

I was reading "A Convenient Method for Securely Managing Passwords, Halderman et al., 2005". In short, the authors say to do the following: ...
0
votes
0answers
25 views

exfiltrating salts with timing attacks?

It seems to me that it's theoretically possible to exfiltrate a salt against a hashing algorithm that isn't constant time using specially crafted inputs. Are there any examples of this being done in ...
0
votes
0answers
46 views

Authenticating without sending password to the server, and store data encrypted with password derived key on server

I am trying to think of a scheme that would allow a user to authenticate to a server, whithout sending the password to the server, and to also derive a symetric key on the client (that also never gets ...
0
votes
1answer
101 views

hash algorithm for user accounts passwords in macOS 10.12, 10.13, 10.14

I study this article: How to Hack a Mac Password Without Changing It and get interested in what hash algorithm is used for hashing user accounts passwords in macOS 10.12+? My hypothesis is that it ...
0
votes
1answer
246 views

Is there a password hash function with a human component?

Sort of Related: Is there a cryptographic hash function that can be performed with pencil and paper? One problem with hashing passwords is that the attacker has more of everything it seems. More ...