Collaborate Disseminate
In the Server hello, I got the below Cipher suite
TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
Now, I know that we are using DHE for the key exchange, we are using RSA for the authentication, and AES for the encryption, and I know the complete pro… Continue reading What’s the use of HMAC or hashing in TLS or SSL inspection
Let’s say we want to generate a hashed value that starts with "abc". Is it computationally cheap to find out an input? Note that here we just want to find any input whose hashed value starts with "abc".
Background
I fou… Continue reading Is it computationally cheap to generate hashes that have a specific prefix?
I have a list of hashes, I need to find the original value of any of them.
So far I know that the hashes are only numbers of length 30. The format should be something like 012524012524012524012524012524.
What is the best way to create an a… Continue reading Best way to bruteforce a list of hashed integers?
During a CTF, I came across a certain hash type which can’t be identified by various tools (hashID, crackstation, hashes.com, etc.)
The data is as so:
– Plaintext : abc123
– Hash : 7inmu7WsEM3erPqQT23neSWBybGgry5QSq4yXdUS+rA=
– Salt : k5m… Continue reading Unknown Hash Type
I am currently learning about cybersecurity and trying to implement it in my next web application.
I have been reading some articles about hashing, specifically SHA2 and Blowfish.
In this article, it is recommended to add a hard-coded salt… Continue reading Is it a good practice to add hard-coded salt to BCrypt passwords?
I tried to dump the Windows password hashes from the SAM file decrypted using the key contained in the SYSTEM file (both located under C:\Windows\System32\config) or obtained from the HKEY_LOCAL_MACHINE registry entry, using samdump2.
In b… Continue reading Modern Windows password hash location – ex SAM and SYSTEM files [duplicate]
Could someone please help me tell what encryption type was used to encrypt these numbers "101110347" to these alphanumeric letters "DRjub64YUZ7bXt2FRZo".
I also have dozens of these plaintext numbers and ciphertexts if … Continue reading encryption type and how to get the key [closed]
I am currently running argon2id of hashing function with below parameters on my IphoneXS:
Iterations: 8, Memory: 64MB, Parallelism: 8, HashLength: 32,
These params allow hashing time to be less than 1s.
So is there a formula to calculate t… Continue reading What argon2id parameters should I adjust
As we can see on this page, BLAKE-3 is about 14 times faster than SHA-256. Is it as safe as SHA-256? I would like to use it for my passwords which are 32 cryptographically random bytes, because my API uses application-layer encryption whic… Continue reading BLAKE-3 vs SHA-256 security
I need to hash 32 cryptographically random bytes, but later the verification the value with hash must be very fast, so I decided to use SHA256. Is it a security issue if my passwords are 32 cryptographically random bytes? Maybe you know so… Continue reading SHA256 for hashing 32 cryptographicaly random bytes