Questions tagged [passwords]

Passwords are secret keys which human beings can memorize.

Filter by
Sorted by
Tagged with
0
votes
0answers
12 views

Can I crack a zip file using Hash Suite on Windows? [migrated]

I'm trying to crack a password I set on a zip file using Hash Suite but it doesn't seem to work for me (not sure if I'm doing everything correctly). Basically, this is what I've done: Created a ...
0
votes
1answer
60 views

Generating nicer diceware passwords without losing entropy

Yes, another one of those "I have found a great password-generation strategy" waiting to be shot down! It seems that although diceware aims to be a secure and user-friendly password generation ...
-3
votes
1answer
29 views

just a question regarding passwords .computing the possibilities for a numerical PIN [closed]

How many possibilities for a numerical PIN with exactly 9 digits? How about a PIN with no more than 9 digits?
2
votes
3answers
178 views

Does the use of English words weaken diceware passphrases [duplicate]

A Diceware passphrase is constructed from a set of words chosen from a 7776-word database, using five dice throws to choose each word. The argument is that each word in the phrase adds about 12.92 ...
1
vote
5answers
198 views

Why are password database breaches bad if cryptographic hashes can't be reversed? [closed]

If companies such as Facebook store our passwords as hashes, when they are leaked how can this be a threat to the users? I thought of it because nowadays we do not have computational power to break ...
2
votes
1answer
90 views

pwd-hash like algorithm which can be computed on paper

"Common password problem" is well known problem, when user uses one password for many resources (web sites, logins to computers, etc...) For example, if one web site loses it' database, which contains ...
2
votes
1answer
44 views

About the security of GnuPG private key on-disk storage

GnuPG on-disk storage of secret key material is encrypted with AES-128, with an encryption key generated via an iterated and salted SHA-1 hash of the given passphrase. Is this usage of the SHA-1 hash ...
0
votes
0answers
71 views

Digital Signature Password verification

I currently have this TOFU protocol: First connection: Client generates salt and inputs a password Client saves salt Client hashes password with argon2 and salt Client generates Ed25519 keys Client ...
2
votes
1answer
121 views

Is using quantum computing to break passwords non-sense?

I understand the concept of 'trying all possibilities at once' but can anyone explain this with respect to the fact that my PC only accepts one password at a time? There's no input field that accepts ...
0
votes
2answers
282 views

How to validate a PBKDF2 password

I want to encrypt several files correctly with a PBKDF2 generated key (using a password and salt), I am currently doing so but if I enter the wrong password, as expected an exception occurs. Note: ...
2
votes
2answers
104 views

PBKDF and Entropy

We all regularly use password based, key derivation functions, however something that strikes me as counter intuitive is how PBKDF can somehow "stretch" the entropy of a supplied password to generate ...
2
votes
1answer
76 views

I don't want to store passwords, can I use them as an encryption key for another field?

I'm not a 'cryptographic' anything, so if this is a super-dumb question please let me know (politely). So here's the deal, say I don't want to store passwords because that opens me up to all sorts of ...
0
votes
2answers
110 views

Can an attacker exploit the nonuniform distribution of letters in a diceware password to improve a brute force search?

I use some diceware pass phrases in some places but I have one question that I can't find the answer to. Let's say I roll the dice and get $N$ words with a total of $M$ letters and that I don't put ...
-1
votes
1answer
70 views

Brute forcing/hacking Secure passphrases - difficulty for random strings vs real words

I was wondering about this topic of brute forcing passwords,or ANY other way to deriving them - and asking myself whats more secure (relatively): A Password which includes A) 30 digits length- a ...
0
votes
0answers
52 views

Time-based decryption service

i am thinking about building a public crypto service, yet at the same time, I am still quite new to crypto and therefore prone to snake-oil inventions I guess. My plan is to build a website which ...
-1
votes
2answers
123 views

Can you encrypt a 256bit password with a 256bit key so that it cannot be bruteforced?

Lets say we have an arbitrary but dictionary attackable password that is less than 256bit. (Lets just say the password is '1234Password'). We encrypt this password with a securely random 256bit key ...
0
votes
1answer
92 views

Storing passwords in a publicly available database

I have a public database where users need to store configuration files. The file can contain passwords. Everyone can read config files but only the server can read passwords in them. In the browser, ...
2
votes
2answers
94 views

Authentication without decrypting the password?

To my knowledge it works like this: The server receives the username-password values over a secure & encrypted channel. The username-password values are decrypted in the server and are present as ...
0
votes
2answers
169 views

Best practices for saving encrypted user data without a database

We are setting up a web application which requires users to submit sensitive data. Since entering all the required data may take a long amount of time, we want to give them the option to save their ...
3
votes
1answer
132 views

What is the most secure way to check that a given masterkey is valid?

For the purposes of learning, I'm writing a small utility that allows encrypting a list of passwords using a single master key (using AES-256 and PBKDF2) Before encrypting or decrypting any password ...
-1
votes
1answer
71 views

How many bits should I request from PBKDF2 to create a strong password?

I'm building a tool which generates passwords by hashing a service name with a master key. PBKDF2 was primarily chosen due to availability in the Web Crypto API. What would be a secure value for the ...
4
votes
0answers
92 views

Can “OPAQUE-over-TLS” authentication be optimized?

So while discussing the issues of password-hashing off-loading in our chat I noticed that it's easy to extend OPAQUE (CFRG draft) to essentially be a better standard password based authentication when ...
1
vote
2answers
77 views

Possible combinations of 8 digits, 6 upper case letters, 2 distinct numbers

Assume I want to find out how many combinations there are for a 8 digit word with 6 uppercase letters and 2 distinct numbers, e.g. A7BC9DEF, 1A0CRDEF, ... how many ...
3
votes
2answers
29 views

Mutual keys protection/wrapping

Is there a known risk in having two keys wrapping each other? Let's say, an adversary has access to both AESkey1(key2) and AESkey2(key1). Does it make it much easier for him to recover the keys?
0
votes
2answers
93 views

Where is the password hash calculated, locally on or the server?

My computer security professor uses the following notation, where S denotes a server and A denoted Alice. Alice wants to authenticate herself to the server. The hash function is a hash chain where $h^...
1
vote
2answers
474 views

64 bits password = 13 characters?

If we use upper and lower case letters, and 10 digits, we get approximately 6 bits per character. Then, strings of 13 characters should work. I saw above explanation in the material, but I cannot ...
2
votes
1answer
1k views

Difference between SSHA512 and SHA512

I am using SSHA512 to encrypt email user's passwords. Manually doing this works using doveadm from dovecot. But I can't seem to implement this in my mail client. I can, however, use SHA512. Is ...
1
vote
3answers
317 views

Password re-use by another person or on another service

How does having the same password in different services make it less secure? How does having the same password as someone else make it less secure? Very basic question that I've always wondered about; ...
2
votes
2answers
83 views

How may passwords are available to use in this scenario?

Password string consisting of one or more of the 26 characters A..Z and can be of any length from $1$ to $8$ characters. How may password available to use this scenario? As my calculation, it should ...
-1
votes
1answer
2k views

Decrypting SHA512

I was recently solving a CTF problem and it involved a shadow and passwd file. I got to know the username easily but I am unable to find the password since it is SHA512 hashed. My doubt is that when I ...
1
vote
1answer
175 views

How to prove that a rainbow table is complete?

Passwords that are hashed but not salted can be cracked using the rainbow table. I went through this and this which explains the logic behind rainbow table very well. But I am missing something about ...
15
votes
2answers
5k views

Calculating entropy within xkcd 936: Password Strength

When I calculate entropy for the xkcd Password Strength (comic 936) I don't get nearly the amount of entropy stated in the comic. So why doesn't the the first password "Tr0ub4dor&3" have an ...
3
votes
1answer
112 views

Secure password-authenticated key exchange that allows for passwords to be stored as hashes, but does not make the hashes password-equivalent

Are there any secure password-authenticated key exchange that allows for passwords to be stored as hashes, but does not make the hashes password-equivalent? This would be useful for many ...
3
votes
1answer
84 views

Does it make sense to have long SSH Key with shorter Passphrase?

If we encrypt our data with a longer SSH key which is protected by a shorter passphrase (with a decent entropy), then the limiting factor is entropy of the passphrase. So why do we use a longer key at ...
0
votes
1answer
380 views

Having trouble understanding reduction functions in rainbow tables

I'm continuing doing some personal research on rainbow tables, but forsome reason I cannot understand how to choose the correct reduction function. Wikipedia states that "Only when the attacker has ...
1
vote
1answer
161 views

Hardware, Handheld Password Manager

I am currently working on a hardware project that will utilize the native USB and keyboard emulation capabilities of the Teensy device. Essentially, the user will store an encrypted password database ...
3
votes
1answer
231 views

Is using a smart card and password two-factor authentication?

I use a smart card - as read only device - for user identity as well as a password: The smart card (holds the user ID) is something I have; The password is something I know. Is this still two-factor ...
0
votes
1answer
236 views

Avoid decrypting every password in a password manager

The Setup I'm making a password manager for fun. It stores a random encryption key, encrypted with a key derived from the master password, and then it stores the data, which is a list of (site, ...
0
votes
3answers
642 views

Recommended minimum entropy for online passwords in 2018

Assume a simple case, that an attacker knows the password creation scheme, and that we're not dealing with state actors, nor with sites which keep passwords in plain text. We're trying to defend ...
0
votes
2answers
97 views

Client-side password stretching - danger of the salt being public?

In case of using client-side password stretching (plus a single hash on the server) - the server would need to send the salt before authentication, of course. Though the salt is not considered a real ...
4
votes
2answers
160 views

Are PBKDF2 derived keys related if only the number of iterations is changed?

I'd like to encrypt my disk with a password. To generate a nice key from a password, I used PBKDF2, which applies a hash function $k$ times to a cleartext and outputs the final result. When I ...
2
votes
3answers
155 views

Two salts, One password

If I have two different MD5 password hashes with two different salts (the salts are known), is there any way to cryptographically deduce if the two passwords match? Other than brute force password ...
0
votes
1answer
62 views

Quantum security risk to present encryption

Quantum computers will seal the fate of conventional encryption techniques. Of these, the hardest hit will be the RSA algorithm used by 99 percent of all applications the encryption standard for any ...
1
vote
1answer
96 views

Is a singular LUKS volume with different passwords that unlock different filesystems possible?

So it's hard to make sense out of the title. Let me elaborate: In LUKS, you can have multiple passwords that unlock the same volume (due to their "unified key setup" where they have a single master ...
2
votes
1answer
76 views

Password protection in ARJ: 3 characters of password are retrievable

On this site there is information that one can know first 3 characters (bytes) of the password without brute force. I know that ARJ in older versions has very simple encryption, i.e. XOR with ...
0
votes
1answer
129 views

Padding vs Hashing Encryption Key

I am making a program for personal use that will not contain super-sensitive information. I am using this to explore cryptography. Would it be acceptable to use a password to generate a key for AES, ...
6
votes
3answers
295 views

Bounding security of password authentication given entropy

An adversary Craig tries to log-in as Alice on a system that will only accept the right password, leaks (only) if an attempt succeeds, and allows many attempts. Alice's password choice is modeled as ...
1
vote
2answers
90 views

Hashing login and password?

For a login the user credentials are typically some form of "username" and a matching "password". The password is (hopefully) stored as a hash in the database. But what about the username? Is the ...
1
vote
2answers
157 views

Zencash uses your passphrase to identify AND unlock a wallet - how is this secure?

When looking into Zencash I stumbled into myzenwallet.io (by the Zencash creators), which gives you the option to enter a passphrase to generate a wallet (seems normal), but then after creating your ...
0
votes
2answers
149 views

Security of password hash with known prefix and appendix

Assume I have a password that is exactly 32 characters long. I hash it the following way: Prepend 1524 bytes (known to an attacker) Append 3356 bytes (known to an attacker) Do the checksum It is ...