Tagged Questions
4
votes
2answers
88 views
HMACSHA512 versus Rfc2898DeriveBytes for password hash
We are currently using HMACSHA512 in .net, with a 128Char (64byte) validation key
The salt is 64 char randomly generated string.
We allocated 2048 length on the database for the hashed base64 string ...
2
votes
2answers
330 views
Salted hashes vs HMAC?
Most of discussions involving access credentials include references to "hashing salted passwords". Is this another way to referring to the HMAC algorithm or a totally different operation? Different or ...
2
votes
1answer
116 views
Can a salted hash be an effective MAC?
An HMAC is basically a "keyed hash". Only the correct message and the correct key will produce a particular hash digest efficiently.
Conceptually speaking, the same can be said for a salted hash; ...
1
vote
3answers
140 views
Validate hmac with hashed stored key
What if an HMAC is correctly generated and sent with the data to the server, so far I know the server needs to know the original data with which the MAC was created in order to re-create the MAC and ...
2
votes
3answers
344 views
Proper hash_hmac key creation
I'm looking for, but unable to find, some definitive information on how long to make the secret and what characters are useable in creating a HMAC signature in PHP using SHA256.
I found some ...
3
votes
3answers
1k views
Is a HMAC-ed password is more secure than a bcrypt-ed or scrypt-ed password?
Given an option , which one should I choose , a HMAC for storing a password securely or a bcrypt or scrypt library?
6
votes
2answers
397 views
HMAC Based Request Signing - Storing the Salt
I'm working on a (non high security) project that currently isn't live but might go live at some point.
We have a REST API (implemented using Restlet and Neo4j) running on a server and an Android ...
34
votes
4answers
11k views
Password Hashing add salt + pepper or is salt enough?
Please Note: I'm aware that the proper method for secure password storage hashing is either scrypt or bcrypt. This question isn't for implementation in actual software, it's for my own understanding.
...
