Collaborate Disseminate
scrypt was designed to use a lot of memory, and if all that memory wasn’t used it would be some orders of magnitude slower to compute. Either way, it counters custom hardware attacks, where there tends to not be so much memor… Continue reading Password hashes with large internal state
I read previous posts about the topic of how to encrypt data and login with the same password/key (e.g. Here, Here), however the concept still seems unclear to me, especially which data it is safe to store in the database.
… Continue reading How to encrypt data and login with same password – revisited
I’m using scrypt to stretch a user-supplied password for use as an AES encryption key. The data that’s being encrypted with the AES encryption never changes.
I’m aware that if the user changes the password, the random salt m… Continue reading Does changing the scrypt salt have security implications?
1) As storing passwords in plain text in databases are not secure and so is not a good practice.
password stored in db = “abcde” (plain text)
2) To avoid this, passwords are stored after being hashed using some reliable hashi… Continue reading Are Salt strings stored by application?
I’m trying to wrap my mind around scrypt and how it’s hashing works. I’ve got a basic function that will create a scrypt hash, however it seems that everytime I run it, the hash is different. Does scrypt always output a diffe… Continue reading Why is a scrypt hash different each time?
I have at most 10,000 files that I want to store encrypted with one
password.
The current idea is:
Have 1 master file containing (expensive) parameters for scrypt.
For encryption/decryption hash a user password with the … Continue reading File encryption at rest, password considerations
I have at most 10,000 files that I want to store encrypted with one
password.
The current idea is:
Have 1 master file containing (expensive) parameters for scrypt.
For encryption/decryption hash a user password with the … Continue reading File encryption at rest, password considerations
You are probably familiar with this table:
The source of the table is this here
This table is 10+ years old. Is this still valid with actual technology?
Wikipedia says that since 2014 there is ASIC equipment used for cr… Continue reading How to interpret the scrypt vs bcrypt vs pbkdf2 comparison table?
You are probably familiar with this table:
The source of the table is this here
This table is 10+ years old. Is this still valid with current technology?
Wikipedia says that since 2014 there is ASIC equipment used for crypto-currenci… Continue reading How to interpret the scrypt vs bcrypt vs pbkdf2 comparison table?
I don’t understand how HMAC can be used in the scrypt algorithm. For what purpose does scrypt use HMAC?