Stack Exchange Network
Stack Exchange network consists of 181 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.
Visit Stack Exchange
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
Anybody can ask a question
The best answers are voted up and rise to the top
I just made a new account with some eGov service (Belgian government).
I use LastPass (which generates long, random strings for each site),
But the system told me that the maximum allowed length was 16 ASCII symbols. Why do people do this? If they hash it, then the length should not matter, right?
Is there a reason for this? I cannot see a any good explanation for this. What am I missing something here?
25722 silver badges77 bronze badges
asked Jun 13, 2013 at 14:37
33322 silver badges1111 bronze badges
Some hash functions are based on block ciphers like DES. The maximum (effective) input size of these algorithms are limited by the block-size of the internal cipher. See for example:
There is of course a non-negligible possibility (we are talking about eGov) that the password storage of your particular service is fundamentally flawed.
answered Jun 13, 2013 at 14:48
1,74011 gold badge99 silver badges1515 bronze badges
Not the answer you're looking for? Browse other questions tagged