Timeline for Is it safe to use SHA-512 to identify credit card?
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 20, 2018 at 23:19 | comment | added | John Deters | Consider adding the the fact that the last 4 digits of a PAN are permitted by PCI to be preserved for printing on the receipt, matching card numbers on returns, etc. When you subtract those 4 additional digits from the set of possible guesses (you can still use the Luhn check digit to exclude 9 out of 10 guesses as invalid) you're down to guessing only five digits for a given 16-digit PAN with a pre-determined BIN. The system you described above could crack those literally in real time. | |
| Jan 20, 2018 at 23:09 | history | edited | Royce Williams | CC BY-SA 3.0 |
trim some non-functional hashcat output for simplicity
|
| Jan 20, 2018 at 23:00 | history | edited | Royce Williams | CC BY-SA 3.0 |
clarify 6-digit BIN in examples
|
| Jan 20, 2018 at 22:54 | history | answered | Royce Williams | CC BY-SA 3.0 |