Timeline for Is it a good idea to use an input by the user as SALT?
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 24, 2013 at 15:52 | comment | added | Kaz | I see your point. So in India, "maiden name" is a full name, since both names change on marriage? Also, the birthday paradox is not literally about birthdays, with 366 values. This is just how the name is derived. The birthday paradox tells us, for instance, that it's more likely to find two files that has to the same hash code, than to find a file that hashes to a given hash. | |
| Jul 24, 2013 at 5:33 | comment | added | vinaya | Though I agree that user input might not be a good idea for salts, the point about odds of duplicates is different. We in India have so many religions(>36,000 deities) and languages (>150 official), our zillion or so different names and surnames are written in a kazillion different ways (eg Adity, Aditya, Adithya - same name; my husband and I haven't met people with our first names in 50/54 years!) Birthday paradox is based on only 366 choices! And so far, we do not have a single duplicate combo of first name and last name in our community. Hence the idea! | |
| Jul 23, 2013 at 20:41 | history | answered | Kaz | CC BY-SA 3.0 |