Collaborate Disseminate
I’m reading the wikipedia for HMAC, and I feel a little bit lost.
I’m wondering if there exists…
digest = HMAC(msg, key)
Is it possible to prove that digest is computed from msg, without knowing the key?
Continue reading Zero-knowledge proof of HMAC function [migrated]
According to the HMAC specification in RFC2104, an HMAC is computed in the following way:
HMAC(K, text) = H(K XOR opad, H(K XOR ipad, text))
where H is the underlying hash function, , is concatenation and K has the length of one block.
No… Continue reading Why does HMAC use the hash twice?
While NIST mentions only the hashing algorithms for use in cryptography, there is lack of clarity specifically for password hashing algorithms.
Does anyone know are there any algorithms approved by NIST for password hashing?
Also, I could … Continue reading support for adaptive password hashing algorithms [closed]
Assuming a product shelf life of 30 years and the product which is released now in 2021, what is the recommendation/suggestion for hashing or encryption algorithms to use in the product?
That means, should I directly make use of the superi… Continue reading Security of hashing and encryption algorithms for 30 years
This question is about how efficient it is to bruteforce SASL authentication in the XMPP protocol.
I read the XMPP SASL authentication steps (stackoverflow link in case the first one breaks), and reimplemented a script that parses a networ… Continue reading XMPP authentication bruteforce with hashcat
Suppose a company wants to implement 2FA for it’s users using phone number OTP system, but does not really want to store their phone numbers as it could get breached and phone numbers are considered private.
What they intend to do is store… Continue reading Effective ways to hash phone numbers?
If I started with “password”, then change it to “password2”, “password3” etc, is that easier to crack the hashes of the set of passwords than if I used only the original password?
Does having the output of hash(password1), hash(password2),… Continue reading Cracking hashes of trivially modified passwords
I need to decrypt a password. I have the ciphertext for this
however, I have many plain text and encrypted equivalents.
This device can only be given passwords with a maximum of 8 characters from the 0123456789abcdef alphabet, and it can b… Continue reading About password ciphertext [duplicate]
I was wondering something about a day ago when I remembered that Apple stores notes in a database (so you can recover them or view them on icloud.com) – What if Apple stores your notes in plaintext?
I’ve heard you shouldn’t store passwords… Continue reading Is it bad practice to store passwords in iCloud notes?
Let’s imagine that we have a particularly bad hashing algorithm that, given any input, will output 1 of only 100 possible hashes.
Now lets imagine that 2 of these possible hashes, when hashed again, produce the same output, all other input… Continue reading Does using multiple rounds of hashing increase chances of a collision?