Collaborate Disseminate
I’m a beginner in Information Security and am learning about salting. Unfortunately, most of the time I have to learn by myself since the lecturer doesn’t provide deep explanation on these. I now have to solve some problems related to this… Continue reading Problem understanding salting
Masks are proven tools against airborne diseases, but pathogens — like the COVID-19 virus — can collect in a mask and survive which complicates handling and disposal. [Ilaria Rubino], a researcher at the University of Alberta, recently received an award for her work showing how treating a mask’s main filtration …read more
Continue reading How Researchers Used Salt to Give Masks an Edge Against Pathogens
I have no cyber security knowledge whatsoever, and am trying to safely store passwords in a database. I understood I need to use salt, to avoid rainbow table attacks and to make sure two users with the same password will have different pas… Continue reading Does complexity of salt in password hashing matter?
There’s a lot of folklore around post-processing of prints from FDM printers. Proponents swear by their methods, which are generally intended to either strengthen the part or to improve its appearance, or both. But do they actually work?
Knowing that a collection of anecdotes is no substitute for actual data, …read more
Continue reading Take This 3D-Print Post-Processing Method with a Grain of Salt
I read that when salting passwords, it is advised to use a h(pwd||salt) construction instead of h(salt||pwd), the latter being vulnerable to a length extension attack.
What are possible scenarios in which being able to extend a salted pass… Continue reading Password salting vs. length extension attacks
The biggest problem with fused deposition 3D prints is that while the layers should stick together, they aren’t the same as a solid piece of plastic you would get from, say, injection molding. You can anneal plastic using moderate heat, but it is likely to cause the part to deform …read more
One way to secure a password in the database is to hash it with salt i.e. appending a random string to the password and then hash it and store the value.
Does encrypting the password || salt then hashing it make it more secure? Is it reall… Continue reading Is adding encryption before hashing more secure?
I have read here and here, that instead of using pepper, it is better to encrypt hashed/salted passwords before storing in the database. Especially with Java, as there’s no library for salt/pepper, but just for salt hashing, and I’m not go… Continue reading Encrypting salted password hash before storing in the database
I have recently read an article about storing passwords safely and I have a few misunderstandings. I found out 4 ways of storing users’ passwords:
Just keep them in plain text
Keep passwords in plain text, but encrypt the database
Hash a … Continue reading Why are salted hashes better than just hashing?
I’ve been having trouble with this certain salted MD5 hash, even though I know the salt, and I’ve been having trouble finding anywhere online that will crack salted MD5 hashes. All I’m finding is just straight MD5 only. Can anyone point me… Continue reading Cracking known salt MD5 Hashes online [closed]