1,146 reputation
711
bio website vineetreynolds.blogspot.com
location Bangalore, India
age 30
visits member for 3 years, 3 months
seen Jan 16 at 1:56

About me:

I am a versatile software engineer. I work in several fields in software including domain driven design, application security, application integration, to name a few.

I spend quite a lot of time reverse engineering and analyzing the Java virtual machine, application servers and open source libraries. When not exploring code, I would typically be reading the specifications of various JSRs, or working on a FLOSS project. If you wish to contact me directly, I'm one mail away at vineet[dot]reynolds[at]gmail[dot]com.

My FOSS contributions

My project repositories are at BitBucket and GitHub. I'm currently a contributor to the Forge and Arquillian projects.

My Resume

My resume is on careers.stackoverflow.com.


May
21
awarded  Yearling
May
21
awarded  Yearling
May
21
awarded  Yearling
Dec
29
awarded  Enlightened
Dec
29
awarded  Nice Answer
Dec
29
awarded  Good Answer
Nov
11
awarded  Critic
Nov
10
awarded  Necromancer
Jul
12
revised Salting password with the first 8 bit of the password itself
deleted 71 characters in body
Jul
12
comment Salting password with the first 8 bit of the password itself
@Peter, I believe I've addressed your concern, while retaining my original answer that assumed storage of the salt.
Jul
12
revised Salting password with the first 8 bit of the password itself
Added notes on cryptographic properties for salts
Jul
12
revised Salting password with the first 8 bit of the password itself
Added notes on cryptographic properties for salts
Jul
12
revised Salting password with the first 8 bit of the password itself
Added notes on cryptographic properties for salts
Jul
12
comment Salting password with the first 8 bit of the password itself
@Peter, see my comment to Paul's answer. I'm aware of the fact that the salt need not stored. That itself means that a hash chain computation is feasible, and that the salt has lost it's property of being a cryptographic salt.
Jul
12
comment Salting password with the first 8 bit of the password itself
@Mohamed, read the last sentence in the answer - If the salt is computed from the password itself instead of being randomly generated, then two accounts with the same password will always have the same password hash. If you are not storing the salt and if you are deriving it from the password, the hashes generated for two users will be the same if they have the same password (which is the scenario that salts are meant to prevent).
Jul
12
awarded  Nice Answer
Jul
12
comment Salting password with the first 8 bit of the password itself
+1 for pointing out the loss of protection against rainbow tables. Of course, the attacker must still compute the tables as opposed to using a downloaded set of hashes, but he must do it only once.
Jul
12
revised Salting password with the first 8 bit of the password itself
Removed incorrect wording on entropy calculation
Jul
12
revised Salting password with the first 8 bit of the password itself
added 23 characters in body
Jul
12
revised Salting password with the first 8 bit of the password itself
Spelling