Key-stretching adds additional security to potentially weak keys by requiring an expensive computation to transform the initial key into a derived key.

learn more… | top users | synonyms

11
votes
3answers
424 views

Can I use the same password both for SRP and for client-side encryption?

Suppose a less-than-trusted server is used to store users' confidential data (encrypted at the client side), and both tasks - authentication and encryption/decryption - should be doable with a single ...
1
vote
2answers
147 views

Should hashing hashed hashes colide or not?

Since key stretching basically boils down to hashing hashes over and over again (where salt, pepper and password individualize the hash function, but the principle remains the same), I wonder about ...