Skip to main content

Questions tagged [salt]

Salt is unique (usually random) data passed into a hash function for password storage to avoid the possible usage of rainbow tables or similar attacks. Salt will not help against dictionary or brute force attacks, as the salt is usually stored together with the hash.

14 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
7 votes
0 answers
302 views

Who invented salt, and why is it called salt?

I'm looking for an authoritative reference about the history of salts in the context of hash functions. Why is the personalization string in a hash function called a "salt"? Who should be ...
Mikero's user avatar
  • 13.5k
4 votes
1 answer
2k views

openssl encryption salt length

when i was reading the latest source code of openssl, i found openssl enc has an 8-byte (64-bit) salt length; because the same ...
Cyker's user avatar
  • 729
1 vote
0 answers
39 views

How can knowledge of a secret be compared among untrusted entities?

Lets say entity A sends a secret "token" to anybody that they trust. The token itself is the proof and its sent equally to everybody and it has or needs to be derived from application ...
secret-token's user avatar
1 vote
0 answers
32 views

Does a salt by a trusted party remove the need for collision resistance for a binding commitment?

Say a Human is operating their trusted computer, Alice, and Human wants to hand copy a collision resistant commitment, with a security factor of 128 from Bob on to paper. Naturally we want the ...
Nic's user avatar
  • 498
1 vote
0 answers
52 views

Can the salt be derived based on the other components of encrypted data?

I'm using python.cryptography's Fernet with PBKDF2 passphrase hashing to encrypt a piece of data (the value) that is stored, encrypted, in a database. The hashed passphrase is not stored in the ...
FuzzyChef's user avatar
  • 111
1 vote
0 answers
39 views

AES implementation for non-password multi-document decryption usecase

I am trying to encrypt/decrypt multiple user documents (consider text) in an application. Unlike the use case of passwords where decryption happens once during an API call, in this application during ...
Shubham Chaudhary's user avatar
1 vote
0 answers
248 views

Is it safe to re-use the salt for HKDF as a challenge for proof of possession after key derivation?

I have a system made of 2 or more parties, already sharing a master key MK, who want to agree on a session key SK (both 128-bit ...
gentooise's user avatar
  • 254
1 vote
0 answers
163 views

Authentication of short message based on 6-digit alphanumeric compare-and-confirm

I have two parties that want to communicate with each other based on a shared password. The protocol is using PBKDF2 (with HMAC-SHA256) to create a shared key on both sides (due to restrictions on the ...
budderick's user avatar
  • 425
0 votes
0 answers
46 views

Generic encryption & decryption module - question regarding password stretching & salt

We want to implement an encryption / decryption module that we want to provide to different internal components of our system (internal library for internal components). The component will provide (...
TrinityTonic's user avatar
0 votes
0 answers
96 views

Finding out the hashing algorithm and salt if you know the password and the resultant hash

If I have the password and hash will I be able to find out the Hashing algorithm and salt used. What tools can I can use? Will hashcat work?
George Cherian's user avatar
0 votes
0 answers
406 views

Adding salt to Blake3 Key derive function

According to the whitepaper, Blake3 can be used as a key derivation function (function key_derive). Currently, as a key ...
Ziva's user avatar
  • 235
0 votes
0 answers
96 views

Best way to derive a MAC key without a salt

It's best to use separate keys for encryption and the MAC. Most implementations tend to derive a larger key and split it in two (e.g. scrypt with an output of 32 + 64 = 96). Alternatively, you can ...
User's user avatar
  • 1
0 votes
0 answers
24 views

Is my password database encryption flow secure?

I'm not an expert and I would be very glad if someone could take a look at it and tell if there are any problems with it Things I know/think are problematic using base64 digest + getting the first 32 ...
CodingKiwi's user avatar
0 votes
0 answers
122 views

Static Salt In Argon2 For Converting ECDH Shared Secret Into AES Key

I am using Argon2 to convert an ECDH exchange result into the correct format for AES-256 encryption. However the library that I am using for Argon2 requires a salt. Are there any weaknesses of using a ...
SamG101's user avatar
  • 613