Questions tagged [passwords]

Passwords are secret keys which human beings can memorize.

Filter by
Sorted by
Tagged with
1
vote
1answer
35 views

Where to obtain a common/weak password list (black list)?

The NIST 800-63B publication specifies recommendations regarding memorized secrets (passwords) https://pages.nist.gov/800-63-3/sp800-63b.html#memsecretver specifically section "5.1.1 Memorized ...
0
votes
0answers
23 views

Number of combinations with a max. of successively repeated characters

I would like to calculate the possible password combinations for a password that is 60 characters long, has the letters a-f and numbers 0-9. Also no character should repeat successively more than 7 ...
0
votes
0answers
22 views

What is the purpose of hashing the identifier in the secure remote password (SRP) protocol?

In the secure remote password protocol version 6a, the identifier for the user, I, is hashed along with the salt and the password on the client. While I understand ...
1
vote
1answer
62 views

Is this mentally computable password system, cryptographically secure? And anything like this out there I can find?

Please bear with me on this, I'm not learnt in this field, just trying to ask questions about the security of my encryption method. I'm trying to create a mentally computable human password manager ...
2
votes
0answers
38 views

What grade of protection does a private key's passphrase provide at best?

Does a passphrase with high entropy provide the same level of security as the private key itself? General scenario: An attacker has access to a private key file that is protected with a passphrase ...
0
votes
2answers
45 views

How to be able to change the password to access data encrypted with AES-GCM, without reencrypting?

Let's say you need to encrypt plaintext which is 1 TB big. You have a password pwd. This very classical AES-GCM process is ...
0
votes
3answers
160 views

Why is SHA256/SHA512 not broken for shortish passwords

I don't get why SHA-256/SHA-512 hasn't been broken, at least for shortish (10-12 character) passwords It is perfectly plausible to pre-compute a password/hash-pair table using numerous very fast ...
0
votes
0answers
15 views

Is my password database encryption flow secure?

I'm not an expert and I would be very glad if someone could take a look at it and tell if there are any problems with it Things I know/think are problematic using base64 digest + getting the first 32 ...
0
votes
1answer
56 views

Are there any methods for constructing a password that can be reconstructed if forgotten and is as secure as randomly generated ones?

Is there a formal name for such a thing, so I know what to google? Is it possible to make them as secure as randomly generated passwords? An illustrative example would be something like picking a ...
0
votes
0answers
24 views

Should I use 2x the number of CPU / core for Argon2id parallelism?

I've read that I should use 2x the number of CPU available from some documentation while others suggest using between 1 and the number of CPU. I realize there is no hard answer here but I'm curious ...
0
votes
0answers
34 views

Generating traceable passwords

I'm new to cryptography, so please bear with me as I try to explain what's going in my head. I have an idea to write a program to generate one-time passwords for online conferences that are although ...
0
votes
0answers
92 views

Is this password-cracking challenge possible?

Taking a graduate computer security class, part of our current assignment is to crack 50 Unix md5crypt password hashes, due on Thursday, October 8th (in eight days.) I've managed to crack 49 out of ...
0
votes
0answers
40 views

What can be deduced/extracted from this local hash extracted from Windows Machine?

I'm new to cryptography. I've been experimenting with getting Windows hashes to see whether it's possible to reverse engineer. The following hash is what I got from my test laptop. What can you ...
1
vote
1answer
126 views

How to choose parameters for Argon2 for password vault

I'm creating a password vault and I'm planning on using Argon2id to derive the master key from the master password. For encryption I'm planning on using XChaCha20 with Poly1305. To be clear: a set of ...
0
votes
1answer
92 views

Is this cumbersome strategy to produce a ridiculously strong password valid?

I'm writing something where somebody wants to have a ridiculously strong password for a file and yet be sure that he will always be able to reconstruct it. The way I have thought of this might be a ...
0
votes
1answer
92 views

Why should I export my private key instead of well known asymmetric crypto mechanism on openkeychain?

I'm trying to use password-store as password manager under linux. I created a private github repo with my gpg files in order to use it with other devices. I installed android-password-store app for ...
13
votes
13answers
2k views

Cryptography elements needed for a story

Note: following Maarten Bodewes's answer, I edited this post to make it clearer. I'm writing something partly driven by the need to crack a few encrypted files. This is what needs to happen in the ...
6
votes
3answers
1k views

Good layperson analogy for password and encryption keys

NOTE: QUESTION UPDATED. SEE BOTTOM OF THIS POST. I'm writing something where I need to make someone come across as though they know cryptography. I don't know enough, but as cryptography plays only a ...
0
votes
2answers
79 views

How to calculate the entropy for a fixed length random passwords which has restrictions on the type of characters used

If we have a set amount of usable characters, but no other restrictions on the potential characters in a completely random fixed length password, we can easily calculate the entropy by doing: $\log_2(...
-1
votes
1answer
132 views

Is storing salts encrypted a good idea?

I've read that storing password hashes in a database, you can store the salt in plaintext alongside the actual hash with no detriment to security. I was thinking that one could derive a key from the ...
0
votes
0answers
24 views

Could someone please explain the implementation of public-private key encryption for storing passwords?

As someone new to cryptography,I have a question about how logins work on websites. I understand mathematically how asymmetric encryption works and how https web requests work to securely send ...
0
votes
1answer
64 views

How to provide secure password based encryption with password reset option

I am trying to build website that will encrypt some data for the user using his/her the output of scrypt on it, now the idea is that this schema is not flexible because if the user loose their ...
-1
votes
1answer
110 views

What kind of a strategy can be used to crack this password?

The password is 11 chars. It has 5 letters and 6 numeric characters. There is at least 1 uppercase and 1 lowercase in it at the same time. Can an attacker benefit from these information even though he ...
1
vote
1answer
68 views

Combining algorithms for password storage?

Is it more secure to combine algorithms for password hashing, for example, Scrypt, Bcrypt, SHA-3, etc.? If an attacker wants to use dedicated hardware, he would need one for each algorithm. However, I ...
0
votes
1answer
164 views

Can you correct my understanding of Argon2? [closed]

I'm a bit new to the cryptography field (completely new), and could really use your guidance. Please, correct my understanding, as defined by the following statements. The ...
1
vote
0answers
1k views

Relation between Zoom id,password and join URL [closed]

We all are using zoom application for joining/hosting meetings in this corona virus period. As we create a meeting, a new id, password and a url is generated. Some real examples follow- Id: ...
1
vote
1answer
100 views

Do all PAKE assume that all parties already have a password?

I was looking for a means to perform a key exchange without relying on a PKI. I discovered Password Authenticated Key Exchange (PAKE) and after reading J-PAKE; I have the following questions: Do PAKE ...
2
votes
2answers
900 views

Just how insecure are VeraCrypt containers encrypted with short passwords?

When I create a VeraCrypt file container using the GUI, it displays a warning whenever I type in a password under a given number of characters. I was wondering just how insecure, in practical terms, ...
0
votes
1answer
89 views

how many iterations of SHA3 (keccak256) hashing would be required to provide reasonable protection for the following data structure?

((A , B , C) , (D , E , F, G, H)) Where: A is 0x0-0xF, (1 of 16) B is 0x00-0xFF (1 of 256) C is an 8 digit integer D is a one of a list of one hundred words padded to 12 characters E is a one ...
0
votes
0answers
39 views

Is the password based key exchange secure even if the public key is known to adversary?

I am assuming the answer for part 1 to be a "NO" as the adversary knows the public key he can get the password by offline attack IN part 2 : the answer is "yes" as the public key is freshly generated ...
1
vote
1answer
49 views

Secure password reset

In my model I use two different keys, one for authentication and the other for the encryption / decryption of the data that the user saves, each derived from the master password with a KDF function. ...
3
votes
2answers
151 views

How much entropy do I need to add to passwords if they are NOT used in conjunction with logins

I'm building a system to authenticate users to a website via a single use login token. This token can either be included in links OR typed in directly by the user as a code. Because of that second ...
0
votes
2answers
90 views

For uniterated SHA-256 of salted password, should the password precede the salt?

This is a follow-up to this question (thanks to answers from @fgrieu and @kelalaka ) about the format of a salt when hashing a salted password. I realize this is pretty much academic, as the proposed ...
1
vote
2answers
198 views

What format should a salt be when it is concatenated with the password?

Assume that, in the available environment, it is not possible to use modern password hashing functions (bcrypt, scrypt, Argon2, PBKDF2, etc.), so it is necessary to roll my own stand-in, until they ...
2
votes
1answer
122 views

Does pepper *require* an HMAC?

Assume you are already given a properly-salted, password hash $X$ from some slow PBKDF (e.g., like Argon2id). Now, you want to apply some large (~256-bit) secret "pepper" $S$ to it before storing it ...
1
vote
0answers
66 views

Signal Key Stretching Regarding Their Blog Post

I just read this blog post (Signal - Technology Preview for secure value recovery) by Signal and something is not quite clear to me. In section "Stretching beyond a KDF" they generate a ...
2
votes
1answer
212 views

Is it safe to reuse the same nonce for decryption an indefinite amount of times in this context?

I'm creating a password management application and I'm considering using the following procedure to keep passwords safe: Asking the user for raw_password, for ...
2
votes
5answers
195 views

How passwords are fed to key derivation functions?

Suppose I want to encrypt data, send it over the network, and decrypt it on the receiver side. I know the elegant way to do this is by using a symmetric key to encrypt the data and an asymmetric key ...
5
votes
6answers
6k views

Are longer passwords really safer against brute force attacks?

If we take two password strings of different length and attempt to bruteforce match them, it is obvious that the longer one will take longer to crack on average. However if we assume that when ...
2
votes
1answer
73 views

Choosing between hash functions instead of providing a salt for a password hash

I am working on some programs that require the users to store their passwords in my databases. However, due to the fact that I am not sure whether salt should be stored in databases due to my ...
2
votes
1answer
147 views

How slow is the hash used for Mac FileVault encryption?

Certain password strength estimators (for instance, zxcvbn) give estimates that vary with the speed of the hash and the assumed resources of the attacker. I am curious what hash is used by the MacOS ...
1
vote
3answers
369 views

How to securely store and validate a 4-digit PIN used on a mobile device?

I want to be able to securely (1) create and (2) validate a PIN, typed by a user primarily in a mobile app. There is no 'typical' password, although there is another 2nd factor. The starting point ...
0
votes
1answer
48 views

Two party protocol using only hash function

I have been told by my professor to compare two passwords as we do it in Yao's two-party protocol but without using any crypto functions. We are only allowed to use a hash function. The passwords are ...
1
vote
1answer
100 views

PAKE password change

Is there any way to change a password using a PAKE-like algorithm, without the server getting the plaintext of either the old or new password?
0
votes
2answers
200 views

Is it safe to use a deterministic salt as an input to KDF (Argon2)?

I'm prototyping an app that uses client-side password hashing in order to hide the "real" account password from a server (the server hashes any recieved password anyway, so no plaintext records in the ...
2
votes
1answer
386 views

What's the algorithm behind MySQL's sha256_password hashing scheme?

MySQL's old mysql_native_password hashing scheme was the equivalent of this in PHP: sha1(sha1('password', true)); That's a ...
0
votes
0answers
71 views

BIP32 Extended Key to EC Private and Public Key Pair

We are working on an application in Android using Java. In our project, we used to generate EC key pairs (of size 384 bits) using SpongyCastle - an old Android version of Bouncy Castle. The problem ...
2
votes
0answers
2k views

After downloading the Breach Compilation.torrent, how do I properly introduce new breach lists? [closed]

So I downloaded the Breach Compilation (the 1.4 billion usernames w/ respective passwords). When doing so, the friendly dev-like homies they are over @ github where the .torrent file for the latter is ...
8
votes
4answers
9k views

How hard is it to guess a 8 digit PIN?

Say that there are different live situations where you have to select own PIN numbers. Can someone say if it is possible to guess a 8 digit pin within 3 tries, given any methods or resources? Is ...
1
vote
0answers
102 views

What is the formula to calculate password entropy? [closed]

I saw in another thread: Is using 7-8 random words from all words of a language as password a good idea? These calculations: If we assume that English has 171,476 words. Then with 8 words the ...

1
2 3 4 5
9