New answers tagged

0

What do you think ? I can distinguish that from random with 2 notes, I mean, chosen plaintexts [1] You should try to figure out how I would do it yourself - if your goal is to design the "next DES" (I thought we already had that with AES), then you should learn the basics of cryptanalysis... [1]: For nonUSians, I am jokingly referring to a ...


0

Poncho points out that it is important to understand what constitutes a proof of knowing the password. So that answer is important. Beyond that, you're specifically concerned with the ability to find a pre-image for SHA256 given that you know the pre-image comes from a low-entropy source run through PBKDF2. If you think about it, the case you are worried ...


5

Then I would like to have a proof that the user has/knows the key K. The key will be hashed once with a SHA256 function and the result H will be stored in a database (SHA256(key)). So, whenever I will need to verify that the user has the key K, it will be hashed on frontend and only the H value will be sent to the server, so I can compare it with the value ...


1

SHA-256 is commonly used for fingerprinting or for calculation of key check values (KCV's) even in Hardware Security Modules (HSM's). As the hash is a one way function it should be secure. However, that's only used to identify keys, not to proof that you have the key. One thing to worry about is if the key is used for other purposes that include hashing. In ...


Top 50 recent answers are included