Collaborate Disseminate
So I ran openssl speed md5 && openssl speed blowfish and blowfish seem quicker than md5.
Here are the results (ran on windows WSL).
$ openssl speed md5 && openssl speed blowfish
Doing md5 for 3s on 16 size b… Continue reading openssl speed tells me blowfish is much quicker than md5, what am I missing?
Since the best example of pooled resource to crack hashes is the bitcoin network, currently churning through 2.14 ExaHashes/s.
I want to ask, if the resources of this network were pointed towards cracking blowfish, and (by extension) bcry… Continue reading If the bitcoin network was cracking bcrypt, what cost factor would you use?
Researchers have found a new way to recover and decrypt authentication cookies from 3DES and Blowfish protected traffic. In response, OpenSSL is expected to deprecate 3DES’ designation from high to medium. Continue reading New Collision Attacks Against 3DES, Blowfish Allow for Cookie Decryption
I was wondering why PHP’s hash_password function use blowfish instead of threefish. According to Bruce Schneier blowfish is outdated and He is recommending twofish or threefish. Is blowfish enough secure and threefish just slow the login a… Continue reading Why PHP password_hash does use blowfish intstead threefish?
What’s the command line to generate a blowfish password hash? I can’t seem to figure this out at all. Apache’s htpasswd only supports bcrypt, and openssl passwd doesn’t even do blowfish hahes (but it does do blowfish encrypti… Continue reading How do I generate a blowfish password hash in Ubuntu?
This is something I never understood about hashing functions. I know that algorithms like whirlpool and blowfish both produce outputs that don’t follow this pattern, but why is it that most do? Is it some kind of hardware/s… Continue reading Why do most hashing functions produce hashes that have characters a-f 0-9?
I know that many encryption algorithms, while secure, have vulnerabilities.
To reduce risks, would multiple encryption like this
Blowfish_CbC ( Rc2_OFB ( AES128_CBC (myfilecontent)))
be a good idea?
I know that execution … Continue reading Is multiple encryption a good idea?