The blowfish tag has no wiki summary.
6
votes
1answer
753 views
PHP crypt() trims the salt as it would be too long
I am using Blowfish with PHP crypt() for password hashing but I noticed something weird. Quoting PHP documentation:
CRYPT_BLOWFISH - Blowfish hashing with a salt as follows: "$2a$",
"$2x$" or ...
4
votes
7answers
642 views
What is the best way to securely keep clear passwords?
I'm working on a web project that will connect to a database. For that, I will have to store the login/password of that database user in clear (encrypted in a symmetrical way) in order to be able to ...
2
votes
2answers
319 views
Why do most hashing functions produce hashes that have characters a-f 0-9?
This is something I never understood about hashing functions. I know that algorithms like whirlpool and blowfish both produce outputs that don't follow this pattern, but why is it that most do? Is ...
2
votes
2answers
167 views
In this example why do they hash a randomly generated piece of salt before hashing it with the password?
From here, in the code return substr(sha1(mt_rand()),0,22); what is the point of taking the sha1 value? It is appended to the password and together they are hashed using Blowfish. Why not just append ...
2
votes
4answers
1k views
Is multiple encryption a good idea?
I know that many encryption algorithms, while secure, have vulnerabilities.
To reduce risks, would multiple encryption like this
Blowfish_CbC ( Rc2_OFB ( AES128_CBC (myfilecontent)))
be a good ...
2
votes
3answers
276 views
openssl blowfish key limited to 256 bits?
I get the following error if I give a key that is greater than 64 hex caracters (64*4=256 bits).
According to this official document, blowfish is able to support key from 32 to 448 bits.
...
0
votes
3answers
230 views
Preventing dictionary attacks against hashed passwords [duplicate]
Possible Duplicate:
How to securely hash passwords?
I have a website and on that website I use SHA-256 and salt my user's passwords. What I'm doing right now is padding each letter of the ...
