Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [passwords]

Passwords are secret keys which human beings can memorize.

1
vote
2answers
63 views

Possible combinations of 8 digits, 6 upper case letters, 2 distinct numbers

Assume I want to find out how many combinations there are for a 8 digit word with 6 uppercase letters and 2 distinct numbers, e.g. A7BC9DEF, 1A0CRDEF, ... how many ...
0
votes
2answers
63 views

Where is the password hash calculated, locally on or the server?

My computer security professor uses the following notation, where S denotes a server and A denoted Alice. Alice wants to authenticate herself to the server. The hash function is a hash chain where $h^...
1
vote
0answers
13 views

How to choose between password derivation or encryption? [migrated]

Suppose you use a password manager having all possible features of modern password managers: encryption with a key derived from your master password, auto-filling, cloud or local storage, browser ...
1
vote
2answers
228 views

64 bits password = 13 characters?

If we use upper and lower case letters, and 10 digits, we get approximately 6 bits per character. Then, strings of 13 characters should work. I saw above explanation in the material, but I cannot ...
2
votes
1answer
201 views

Difference between SSHA512 and SHA512

I am using SSHA512 to encrypt email user's passwords. Manually doing this works using doveadm from dovecot. But I can't seem to implement this in my mail client. I can, however, use SHA512. Is ...
1
vote
3answers
308 views

Password re-use by another person or on another service

How does having the same password in different services make it less secure? How does having the same password as someone else make it less secure? Very basic question that I've always wondered about; ...
2
votes
2answers
48 views

How may passwords are available to use in this scenario?

Password string consisting of one or more of the 26 characters A..Z and can be of any length from $1$ to $8$ characters. How may password available to use this scenario? As my calculation, it should ...
-1
votes
1answer
396 views

Decrypting SHA512

I was recently solving a CTF problem and it involved a shadow and passwd file. I got to know the username easily but I am unable to find the password since it is SHA512 hashed. My doubt is that when I ...
1
vote
1answer
87 views

How to prove that a rainbow table is complete?

Passwords that are hashed but not salted can be cracked using the rainbow table. I went through this and this which explains the logic behind rainbow table very well. But I am missing something about ...
15
votes
2answers
5k views

Calculating entropy within xkcd 936: Password Strength

When I calculate entropy for the xkcd Password Strength (comic 936) I don't get nearly the amount of entropy stated in the comic. So why doesn't the the first password "Tr0ub4dor&3" have an ...
3
votes
1answer
48 views

Secure password-authenticated key exchange that allows for passwords to be stored as hashes, but does not make the hashes password-equivalent

Are there any secure password-authenticated key exchange that allows for passwords to be stored as hashes, but does not make the hashes password-equivalent? This would be useful for many ...
3
votes
1answer
49 views

Does it make sense to have long SSH Key with shorter Passphrase?

If we encrypt our data with a longer SSH key which is protected by a shorter passphrase (with a decent entropy), then the limiting factor is entropy of the passphrase. So why do we use a longer key at ...
0
votes
1answer
162 views

Having trouble understanding reduction functions in rainbow tables

I'm continuing doing some personal research on rainbow tables, but forsome reason I cannot understand how to choose the correct reduction function. Wikipedia states that "Only when the attacker has ...
1
vote
1answer
80 views

Hardware, Handheld Password Manager

I am currently working on a hardware project that will utilize the native USB and keyboard emulation capabilities of the Teensy device. Essentially, the user will store an encrypted password database ...
3
votes
1answer
110 views

Is using a smart card and password two-factor authentication?

I use a smart card - as read only device - for user identity as well as a password: The smart card (holds the user ID) is something I have; The password is something I know. Is this still two-factor ...
0
votes
1answer
98 views

Avoid decrypting every password in a password manager

The Setup I'm making a password manager for fun. It stores a random encryption key, encrypted with a key derived from the master password, and then it stores the data, which is a list of (site, ...
0
votes
3answers
149 views

Recommended minimum entropy for online passwords in 2018

Assume a simple case, that an attacker knows the password creation scheme, and that we're not dealing with state actors, nor with sites which keep passwords in plain text. We're trying to defend ...
0
votes
2answers
66 views

Client-side password stretching - danger of the salt being public?

In case of using client-side password stretching (plus a single hash on the server) - the server would need to send the salt before authentication, of course. Though the salt is not considered a real ...
3
votes
2answers
70 views

Are PBKDF2 derived keys related if only the number of iterations is changed?

I'd like to encrypt my disk with a password. To generate a nice key from a password, I used PBKDF2, which applies a hash function $k$ times to a cleartext and outputs the final result. When I ...
2
votes
3answers
117 views

Two salts, One password

If I have two different MD5 password hashes with two different salts (the salts are known), is there any way to cryptographically deduce if the two passwords match? Other than brute force password ...
0
votes
1answer
58 views

Quantum security risk to present encryption

Quantum computers will seal the fate of conventional encryption techniques. Of these, the hardest hit will be the RSA algorithm used by 99 percent of all applications the encryption standard for any ...
1
vote
1answer
49 views

Is a singular LUKS volume with different passwords that unlock different filesystems possible?

So it's hard to make sense out of the title. Let me elaborate: In LUKS, you can have multiple passwords that unlock the same volume (due to their "unified key setup" where they have a single master ...
2
votes
1answer
48 views

Password protection in ARJ: 3 characters of password are retrievable

On this site there is information that one can know first 3 characters (bytes) of the password without brute force. I know that ARJ in older versions has very simple encryption, i.e. XOR with ...
0
votes
1answer
94 views

Padding vs Hashing Encryption Key

I am making a program for personal use that will not contain super-sensitive information. I am using this to explore cryptography. Would it be acceptable to use a password to generate a key for AES, ...
5
votes
3answers
227 views

Bounding security of password authentication given entropy

An adversary Craig tries to log-in as Alice on a system that will only accept the right password, leaks (only) if an attempt succeeds, and allows many attempts. Alice's password choice is modeled as ...
1
vote
2answers
72 views

Hashing login and password?

For a login the user credentials are typically some form of "username" and a matching "password". The password is (hopefully) stored as a hash in the database. But what about the username? Is the ...
1
vote
2answers
130 views

Zencash uses your passphrase to identify AND unlock a wallet - how is this secure?

When looking into Zencash I stumbled into myzenwallet.io (by the Zencash creators), which gives you the option to enter a passphrase to generate a wallet (seems normal), but then after creating your ...
0
votes
2answers
119 views

Security of password hash with known prefix and appendix

Assume I have a password that is exactly 32 characters long. I hash it the following way: Prepend 1524 bytes (known to an attacker) Append 3356 bytes (known to an attacker) Do the checksum It is ...
3
votes
1answer
133 views

aWallet Password Manager

After reading a lot of articles on ramping up the security of my web accounts, I started using aWallet Password Manager for Android to backup my passwords. I like ...
1
vote
1answer
126 views

Safety of having many passwords hashed with the same salt?

I'm working on a web application where passwords must be hashed on the client before it can be send to the server. This is because the user's raw password is used for cryptography purposes and can't ...
0
votes
1answer
538 views

How long will brute force of salted SHA-512 hash will take, if salt is known and possible characters in password are known?

Suppose I know that the password is composed of characters [A-Za-z0-9], length is unknown, but maybe less than 8. If I have information about the salt use to perform hashing, and also hashing ...
1
vote
1answer
34 views

Expanding truly random key into printable password for successive hashing

The STUN network protocol defines its client authorization in the terms of message-integrity check employing the following scheme [RFC5389, section 10.2]: $$ \DeclareMathOperator{\HMAC}{HMAC} \...
2
votes
2answers
111 views

Salt passwords with the username?

Salts should be unique so that an attacker can't brute force multiple passwords at once. However, since usernames are unique, wouldn't it be possible to use some representation of the username as a ...
1
vote
1answer
73 views

SCRAM Iteration Count Attack

I'm not sure if this questions belongs here or in the Information Security Stack Exchange, but here goes... With SCRAM (RFC5802), is there anything that prevents an attacker masquerading as the ...
2
votes
1answer
89 views

Benefit of capitalization when using Diceware passphrases?

If I use a Diceware generated passphrase of any given length, will capitalizing the first word (or any word for that matter) effectively double the number of combinations that would have to be tried ...
2
votes
2answers
356 views

How do I calculate a password space if the password only has eight alphabetic characters (not case sensitive)

I read this wiki article and saw this formula for random password's information entropy. Also the wiki article mention that the symbol count for non case sensitive is 36. Is there a way I can ...
3
votes
4answers
208 views

How many bits of entropy are leaked for every derived password from a master?

Given a master password that has a lot of entropy (similar to Bitcoin HD wallet seed words, 130 bits of entropy or more) how many bits of entropy are lost per leaked generated password? Let's take an ...
3
votes
1answer
239 views

Diffie-Hellman based password challenge response scheme

A very commonly used (examples: HTTP digest auth/CHAP/Kerberos) authentication scheme is something that looks like: Setup. Client and server both know a password $p$. Authentication. Server sends ...
1
vote
1answer
86 views

For WinRar, how long should a password be to make up for a lack of complexity?

Assuming that the best alternative to complexity is length, how long do you recommend a password or phrase to be when using WinRar? Note that I'm aware that it's not always that simple, but I would ...
1
vote
1answer
529 views

Use sha3 for passwords hashing

Is use of sha3 justifiable? Is sha3 better than sha2 in (m)any aspects? P.S. I want to use hashing for passwords in a database
2
votes
2answers
437 views

HMACSHA1 vs HMACSHA2 (for PBKDF2)

I need to choose an HMAC function for PBKDF2. I'm using .net so I don't have the option to use SHA3. At first glance, and according to this answer by Thomas Pornin it seems like SHA512 would be best....
0
votes
1answer
229 views

Why is password recovery so slow for Whirlpool hash, when compared with others?

I'm just curious about why brute force takes so much longer on the Whirlpool hash than it does on the others, as you will see below: ...
2
votes
1answer
167 views

Does this PBKDF2-SHA1 payload hint at a cryptographic security issue?

Blockchain first 16 encrypted bytes, IV, and iter_count – all encoded in Base64: Yms6xqrzCfFsQadVZ5gQonMtnQAAAAAAAAAAAAAAAAAAAAAQJwAA69tYNg== Does it looks like “...
14
votes
2answers
2k views

Password hash that can be upgraded without plaintext password

Most password hashes have a cost parameter that indicates how long the algorithm should take. Is there an algorithm where you can increase that cost for a particular hash, without access to the ...
0
votes
1answer
318 views

What is best practise for salting and multiple-hashing of passwords?

I have been presented with some custom PHP code for salting passwords and applying multiple rounds of hashing. It looks reasonable, but I fear home-grown crypto. Is there an existing password ...
7
votes
1answer
334 views

Is it safe to store both the AES-related data and the PBKDF2-related data (except passwords) in one file?

Assume an "encrypted data package" file format which includes the following data PBKDF2 algorithm salt rounds keylen AES algorithm & mode IV ciphertext where the PBKDF2 salt and AES IV are ...
1
vote
1answer
1k views

How do you get the original salt after it's been hashed to the user's password in the database?

I'm researching how to do salt and hashing. I'll be using SHA256. Here is what I found: To Store a Password Generate a long random salt using a CSPRNG. Prepend the salt to the password ...
1
vote
1answer
63 views

Salt for non stored passwords

I read a lot about the concept of adding a salt to a password and understand that it protects against rainbow table etc. attacks. But this kind of attacks are based on getting access to the server ...
2
votes
1answer
52 views

Pepper and key derivation/stretching

I understand the pepper concept of adding but not storing a secret and iterating through the set of possible secret values for verifying. But is pepper also useful when it comes already to the use of ...
1
vote
2answers
198 views

Comparing different hashes to confirm they came from the same string

Is there any safe hashing algorithm that returns a different hash each time (like bcrypt) but has the possibility to compare 2 different hashes and determine that they were hashed from the same ...