Sha256 is a hashing algorithm.
0
votes
1answer
88 views
How secure is my private key in the Windows Digital Certificate store?
Many files we download don't have digital signatures. Files may get infected or someone may intentionally modify them on our hard disk.
So I wrote a simple file hashing program in c# that creates a ...
4
votes
2answers
105 views
Truncating the output of SHA256 to 128 bits
suppose we need/prefer 128 bit hash output. for example to generate a 128 bit encryption key or, in other applications (e.g. file integrity verifications), to consume less storage space.
i don't know ...
5
votes
3answers
2k views
With ASIC bitcoin miners, should SHA256 be considered insecure for password hashing?
I'm sure everyone here has seen the rise and further rise of bitcoin. The process used for mining bitcoin is basically "let's brute force an SHA256 hash that is less than this amount"
That being ...
0
votes
1answer
63 views
what does GUID have that a whirlpool, md5 or sha2 hash dont
I'm trying to understand the use of GUID and what has always left me wondering is what's so special about them that I should consider using them instead of rolling my own type of unique id.
In other ...
3
votes
2answers
146 views
SHA256 security: what does it mean that attacks have broken “46 of the 60 rounds of SHA256”?
Wikipedia reports
Currently, the best public attacks break 46 of the 64 rounds of SHA-256 or 46 of the 80 rounds of SHA-512.
What does this mean, and how safe is SHA-256 expected to be in the ...
2
votes
1answer
465 views
Security of bcrypt/sha256 key used with AES to encrypt a file
I'm looking to encrypt files using secure hashing and encryption algorithms in Python. Having used bcrypt in the past, I decided to use it for my passphrase calculator, then pass the output through ...
3
votes
2answers
186 views
User authentication + database encryption with same password
I'm working on a private project where I need to store a users financial data in a database. I'll encrypt this data using AES, and I'll be using scrypt to generate a AES ecnryption key from a more ...
3
votes
2answers
501 views
What risk does commoditized dedicated SHA256 processors pose to IT Operations?
With the advent of GPU-based computing, and now commoditized/dedicated SHA256 processors, what risk does this hardware pose to cryptography?
What security algorithms should be closely watched or ...
2
votes
1answer
1k views
Is PBKDF2 only SHA1 in C#?
I can't find a way of specifying the hashing algorithm used by the PBKDF2 (the Rfc2898DeriveBytes class) implementation in C# System.Security.Cryptography.
It seems to be just SHA1. Am I missing ...
29
votes
7answers
7k views
How can crackers reconstruct 200k salted password hashes so fast?
I'm researching for a small talk about websecurity and I found one article about the formspring hack, which made me curious. They claim to have used SHA-256 + salt
We were able to immediately fix ...
2
votes
1answer
1k views
Is BCrypt enough when saving a password into a database?
In order to allow users to connect to my website, I encrypt their password using BCrypt since it is one of the slowest algorithms to decrypt (making a compromised database longer to be decrypted).
...
