12,244 reputation
23994
bio website neal.mcburnett.org
location Boulder, CO
age
visits member for 4 years, 1 month
seen yesterday

I like to engage in "Technology Serving Community" via free software.

Consultant, Ubuntu member, Wikipedia contributor since 2002, ElectionAudits developer, Boulder Community Network co-founder, Internet2 consultant for IDtrust, author of pgpstat, Android enthusiast, ex-Bell Labs web/security/standards maven....

See my web site for way more: http://neal.mcburnett.org/


1d
revised Good password hashing algorithm compatible with PHP and Linux apps
edited title
1d
comment Good password hashing algorithm compatible with PHP and Linux apps
It seems like you've done some interesting research, but also come to some very questionable conclusions. There is a lot of misinformation out there, and of course pbkdf2 and scrypt are supported by lots of systems. Please provide references for your claims of incompatibility, or "problems with bcrypt". Note that password hashing doesn't really require much from a hash function other than being slow, so sha1 or even md5 repeated enough is fine.
1d
reviewed Leave Open Good password hashing algorithm compatible with PHP and Linux apps
2d
comment XKCD #936: Short complex password, or long dictionary passphrase?
Thanks for the pointer! But I think you have a typo there. I'm guessing you're providing a list with 44 bits of entropy, not 64. It starts generating 4-word phrases at 48 bits. And for the record, via for i in {26..81}; do echo -n $i " "; pwqgen random=$i; done: At 26 bits it has 2 word phrases, at 27 it adds punctuation separators, at 31 it has 3 word phrases, with punctuation at 40, at 48 it has 4 word phrases, with punctuation at 53, at 65 it moves to 5 word phrases, with punctuation at 66, all the way up to 81 bits. Seems a bit odd there.
2d
reviewed Close Nmap's options beginning with P
2d
awarded  Custodian
2d
reviewed Close How exactly was Sony Pictures hacked November 2014?
2d
reviewed Close Securing my website and making it Internal use only. Only open to specific usernames/pass
Dec
17
awarded  Popular Question
Dec
16
awarded  Revival
Dec
16
answered Is there a FIPS 181 like standard for random password generation with alphanumerical seed?
Dec
16
revised entropy of FIPS-181 automated password generator
several updates and references
Dec
15
answered entropy of FIPS-181 automated password generator
Dec
2
awarded  Announcer
Nov
23
awarded  Yearling
Oct
14
awarded  Nice Answer
Oct
7
comment Describe an example of indistinguishability obfuscation or functional encryption
Is F really the same when acting on both encrypted and unencrypted data? Or is it something like F-prime that is applied to the encrypted data so that it all works?
Sep
30
awarded  Explainer
Sep
27
awarded  Good Answer
Sep
24
awarded  Autobiographer