People who code: we want your input. Take the Survey

Hot answers tagged


Generally it is possible and secure to hash other hash values. This includes password hashes or Password Based Key Derivation Schemes (which is what this looks like). Note that the security will obviously not be more than the smallest output size of any of the hashes - this is generally OK though since the output size is usually 256 bit or higher. However, ...


Partially true. Kerckhoff's Principle states that we should always assume that the attacker always knows everything about the algorithm, and only the key or password is secret. Your scheme of key derivation, meets the three principles of key derivation, which are the following: Memory-hard: prevents usage of GPUs or asics Non-parallizeable: requires ...

Only top voted, non community-wiki answers of a minimum length are eligible