Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with passwords
Search options not deleted
user 4557
Passwords are secret keys which human beings can memorize.
3
votes
Do sites store login password with hash? If so, can people can use hash collision to log in?
Best practice is to use a slow hashing function like PBKDF2 or Scrypt as brute-forcing the hash of a typical password is trivial. The resulting hash is stored in the database. When a user logs in, the …
- 4,007
5
votes
Accepted
Could a very long password theoretically eliminate the need for a slow hash?
Despite the impracticalities of using a 43-char password, I would say yes, such a long password would be secure when hashed with just SHA256. Assuming 127 possible ascii characters, a password of 8 c …
- 4,007
1
vote
Total password count, given length and pool size
sequenceLength 0 = 0 permutations (950)
sequenceLength 1 = 95 permutations (951)
sequenceLength 2 = 9025 permutations (952)
sequenceLength 3 = 857375 permutations (953)
etc
This is not limited to passwords …
- 4,007
8
votes
Accepted
How can encryption software accept password lengths which are not one of the AES key lengths?
I imagine that Truecrypt uses a KDF, to derive a 128/192/256-bit key from your password. This is standard practice. It's unadvisable to use a password directly, as they're generally low-entropy (pre …
- 4,007