Tagged Questions

-1
votes
3answers
121 views

Salting in encryption (rather than hashing)

I am aware of the benefits of adding a salt to values that are hashed using a one-way function. Is adding a salt to a value that is being encrypted (using symmetric encryption) considered to be good ...
4
votes
2answers
218 views

How less secure is an encryption if we know something about the original data?

I have a number of files encrypted with a key derived from a password. In line with standard practice, I use a random salt and password and do many PBKDF2 iterations to obtain an encryption key and ...
3
votes
4answers
188 views

Is it safe to have the salt equal to IV?

If I'm using AES-256 CBC to encrypt, getting the 32 byte key using multiple iterations of the PBKDF2 function with a 16 byte salt, is it safe for me to let IV be equal to the salt? (Edit: The salt is ...
0
votes
1answer
117 views

Determine hashing algorthim only with known input and output

Given the input: test A system generates the following output hash: 0x001F41B6A0534D3B851D69EFE6237F550100000010D5F4FC65E64BCFDBF2590212E4411C44942C6C734C00ACFE13B958DCAB3614 I do not know ...
2
votes
3answers
184 views

Password Security: Encrypting salt [duplicate]

Possible Duplicate: Password Hashing add salt + pepper or is salt enough? I'm new to security and trying to understand why encrypting or hiding a salt is not considered useful. I've read ...
8
votes
1answer
2k views

Wheres the salt on the openssl aes encryption?

Im interested in knowing how and where openssl inserts the generated salt on an AES encrypted data. Why? Im encrypting data in Java classes and need to guarantee that i can use openssl to decrypt them ...
4
votes
4answers
572 views

Is encrypting a salt value with a password/plaintext a viable alternative to straight up hashing?

The basic problem, as far as I can tell, is that hashing's flaw is that the password is in the hash. Asymmetric encryption's flaw is that the password is encrypted and can be reversed. The posts ...
8
votes
1answer
284 views

Any risk in using the same salt for several hashes on a user?

Right now I'm storing a salt and password_hash on the users table (pretty standard stuff). The need arose to get a secure hash of another field for a user. Is there any risk in reusing the same salt ...
5
votes
2answers
255 views

PKCS#5 Salt privacy? [duplicate]

Possible Duplicate: Password Hashing add salt + pepper or is salt enough? In the official documentation of the PKCS5 V2.0 standard, we can read "The salt can be viewed as an index into a ...