Tag Info

New answers tagged


I think 80 bits is just a reference to the general lower limit of what's considered computationally infeasible to brute force. From wiki: In 2002, distributed.net cracked a 64-bit key in 4 years, 9 months, and 23 days. As of October 12, 2011, distributed.net estimates that cracking a 72-bit key using current hardware will take about 45,579 days ...


Knowing the timestamp would help an attacker only if it affects any of the other token parts. If your IV is dependent on the timestamp, then you've failed already. Getting the entropy of the IV from something that is not dependent of the time it was created is the best way to solve this. On a higher level knowing the creation time of a token could help the ...

Top 50 recent answers are included