Skip to main content
added 181 characters in body; edited title
Source Link
Antonio
  • 113
  • 4

Does using a random number of iterations for PKBDF2-SHA256 help if I only have to protect one key used to encrypt a password protecteded file?

I read about Recommended # of iterations when using PBKDF2-SHA256?

I have also read in Why not just use a small but unusual number of hashing rounds? that when there are multiple password to protect, the moment one is cracked the hacker will know for all passwords which is the number of iterations required. But if I have to protect just one file with one password (or a very limited number of strong passwordsfiles with the same password), does it make sense if instead of selecting 100000 iterations to protect the password I use a "random" number like 97334? Or is there an easy way for the attacker to know how many iterations they need to run?

The tool used in OpenSSL, and the attacker will have the encrypted file(s). The number of iterations to encrypt the key is not visible to the attacker.

Does using a random number of iterations for PKBDF2-SHA256 help if I only have to protect one password?

I read about Recommended # of iterations when using PBKDF2-SHA256?

I have also read in Why not just use a small but unusual number of hashing rounds? that when there are multiple password to protect, the moment one is cracked the hacker will know for all passwords which is the number of iterations required. But if I have to protect just one password (or a very limited number of strong passwords), does it make sense if instead of selecting 100000 iterations to protect the password I use a "random" number like 97334? Or is there an easy way for the attacker to know how many iterations they need to run?

Does using a random number of iterations for PKBDF2-SHA256 help if I only have to protect one key used to encrypt a password protecteded file?

I read about Recommended # of iterations when using PBKDF2-SHA256?

I have also read in Why not just use a small but unusual number of hashing rounds? that when there are multiple password to protect, the moment one is cracked the hacker will know for all passwords which is the number of iterations required. But if I have to protect just one file with one password (or a very limited number of files with the same password), does it make sense if instead of selecting 100000 iterations to protect the password I use a "random" number like 97334? Or is there an easy way for the attacker to know how many iterations they need to run?

The tool used in OpenSSL, and the attacker will have the encrypted file(s). The number of iterations to encrypt the key is not visible to the attacker.

edited tags; edited title
Link
Anders
  • 65.8k
  • 25
  • 185
  • 226

If I have to protect only one password, does Does using a random number of iterations when usingfor PKBDF2-SHA256 helpshelp if I only have to protect one password?

Specifying one detail which is different in my use case
Source Link
Antonio
  • 113
  • 4

Does If I have to protect only one password, does using a random number of iterations when using PKBDF2-SHA256 helps

I read about Recommended # of iterations when using PBKDF2-SHA256?

I have also read in Why not just use a small but unusual number of hashing rounds? that when there are multiple password to protect, the moment one is cracked the hacker will know for all passwords which is the number of iterations required. Not knowing muchBut if I have to protect just one password (or a very limited number of encryptionstrong passwords), I was wondering: does it make sense if instead of selecting 100000 iterations to protect the password I use a "random" number like 97334? Or is there an easy way for the attacker to know how many iterations they need to run?

Does using a random number of iterations when using PKBDF2-SHA256 helps

I read about Recommended # of iterations when using PBKDF2-SHA256?. Not knowing much of encryption, I was wondering: does it make sense if instead of selecting 100000 iterations to protect the password I use a "random" number like 97334? Or is there an easy way for the attacker to know how many iterations they need to run?

If I have to protect only one password, does using a random number of iterations when using PKBDF2-SHA256 helps

I read about Recommended # of iterations when using PBKDF2-SHA256?

I have also read in Why not just use a small but unusual number of hashing rounds? that when there are multiple password to protect, the moment one is cracked the hacker will know for all passwords which is the number of iterations required. But if I have to protect just one password (or a very limited number of strong passwords), does it make sense if instead of selecting 100000 iterations to protect the password I use a "random" number like 97334? Or is there an easy way for the attacker to know how many iterations they need to run?

Source Link
Antonio
  • 113
  • 4
Loading