Questions tagged [salt]
A salt is a random addition to a password to make the hashed password less susceptible to a lookup table attack
328
questions
-1
votes
1answer
56 views
Using a Pepper as the index to insert a salt
In this question on this board the author of the selected answer states the following.
If you, as an attacker, manage to extract hashes and salts from a database, you probably either find a way to ...
0
votes
0answers
13 views
BLAKE2: What is the difference between the salt and the personalization? [migrated]
Libsodium builds their KDF on top of BLAKE2b:
BLAKE2B-subkeylen(key=key, message={}, salt=subkey_id || {0}, personal=ctx || {0})
Besides the key, the function has two additional arguments: The ...
0
votes
1answer
87 views
Login based on password only (might call it a token) [closed]
I hate remembering account names and passwords and noticed I often handle new accounts this way:
If a site is asking for a password I use passwordsgenerator.net to generate a long random password and ...
4
votes
1answer
193 views
Which part of this encoded Argon2 hash is the salt?
I was reading the post Is it safe/wise to store a salt in the same field as the hashed password?:
$argon2i$v=19$m=65536,t=3,p=1$YOtX2//7NoD/owm8RZ8llw==$fPn4sPgkFAuBJo3M3UzcGss3dJysxLJdPdvojRF20ZE= ...
1
vote
3answers
110 views
Using two salts - one stored with the password, one stored in a random row in a separate table
Imagine a login system is being created, and a user's password is hashed thusly:
Users.password = PBKDF2(salt1 + password + salt2)
The result of that ^ operation and salt1 are stored side-by-side in ...
0
votes
0answers
14 views
Save salt in DB [duplicate]
I'm trying to create a random salt on the user thing and complement the salt on the user thing in the DB.
Is it safe to add salt to DB?
If you attack DB and salt is stolen, there is a concern that ...
30
votes
9answers
7k views
Is there a way to add salted hashing to my user authentication without breaking my former login server
I am presented with the following scenario:
I have a MySQL-Database with a table of users. The table has two fields: username and password. The password is stored as an unsalted hash.
An over 15 ...
0
votes
1answer
95 views
should giving salt to unauthenticated users be a problem
Let's say i have a scenario when the user salt is required in client side before login,
the user obtains the salt by this url http://my-api.example/get-salt/userid
that url should return a salt for ...
1
vote
1answer
99 views
Password hashing with salt. Where do you leave the salt? [duplicate]
I want to hash a set of sensitive data using a hash+salt. I've done a little research and now I know that:
The salt should be random.
The salt should not be reused.
Using hashing without salt makes ...
0
votes
1answer
81 views
How should we apply the salt to the password? [duplicate]
According to Wikipedia:
A rainbow table is ineffective against one-way hashes that include large salts. For example, consider a password hash that is generated using the following function (where "|...
2
votes
2answers
110 views
Am I using RfcDeriveBytes correctly, when the salt I'm providing it contains the password?
I'm using Rfc2898DeriveBytes in my application to encrypt a password with a randomly generated salt, and with a set iterator count for slowness.
Before, I just grabbed the generated salt and put it ...
1
vote
3answers
202 views
Anonymizing IP addresses using (sha) hashes; how to circumvent rainbow table attacks?
Under GDPR, IP addresses are personal data. I have no need to trace back IP to specific users, but I would like to limit downloads to one per IP.* I do not want to store plain IPs.
My first solution ...
22
votes
8answers
6k views
How can I re-use my password and still protect the password if it is exposed from one source?
I know that all servers should at least store my credentials as hash(password + salt) + salt, with a secure and well known hash function and a salt unique for me, generated from a secure and well ...
2
votes
1answer
117 views
is it safe to AES encrypt the RSA private key and storing it in the database
i'm building an app that really needs encryption of this type , my question is it safe to store the aes encrypted RSA key in the database ?
here is how i encrypt the key :
i generate a random 256 ...
0
votes
1answer
70 views
How to identify the right hash from a list of salts and pre-given password during authentication?
I apologize for being naive, but I only recently started learning about cryptography and how to go about the security online.
From what I've gathered, the safest-without-sacrificing-efficiency way ...
0
votes
0answers
80 views
How long will it take to crack a hashed random string
If I generate 128 bit, 512 bit and 1024 bit random strings using either:
A native rand() function (C, PHP, Python, etc)
OpenSSL random bytes
Hardware generated random number
And hash the random ...
0
votes
3answers
71 views
How to make the first request which used to create account safe? [duplicate]
To authorize user, our application defined below steps:
Send user email and password (plain text) through HTTPS.
When server received it, generate a salt to hash password and store it.
When user ...
1
vote
2answers
182 views
Letting client encrypt his/her data. How to ensure the client doesn't lose his/her private data?
I am designing a web service where the client is allowed to encrypt his own data on client-side software & then send it to our server, so they can be sure their data is private on our side. Then, ...
0
votes
0answers
74 views
LUKS mitigate brute force attacks even if salt parameter is know?
From What users should know about
Full Disk Encryption based on LUKS
In Linux world, LUKS implementations are based on cryptsetup and
dm-crypt. In order to mitigate the problem of brute ...
0
votes
0answers
26 views
Password Hashing - Where does the Salt gets stored [duplicate]
I have read that it is a best practice to store Hashed passwords using Hashing algorithms which uses Salt to protect from Rainbow table attack.
My question is- if i store the hashed password in my ...
1
vote
1answer
294 views
Do I need to use salt with api key hashing?
I will generate api keys. I plan to store their hashes instead of plain text. do i also need salt, similar to storing password?
AFAIK salt prevents rainbow table attack and those are more ...
0
votes
1answer
64 views
Password storage which avoids privileged insider attack
What are the standard password authentication protocols in client-server setting where authentication happens at the remote server? Is there any password/pin verification protocol which reveals zero ...
2
votes
1answer
251 views
Is hashing without a salt secure for random passwords? [duplicate]
I'm designing an API with token authentication.
I don't want to store tokens as plain text in the database, for the same reason user passwords are not stored as plain text: if the database gets ...
0
votes
0answers
28 views
Is a combination of user login and site domain a sensible salt? [duplicate]
Just out of curiosity (since I know the established password hashing libraries should provide "proper" random salts), would a combination of the user login and the respective site's domain (or a hash ...
0
votes
1answer
48 views
Secure Register - Login Portal [closed]
Im trying to create a secure portal for parents to view their sons or daughters information.
I would need to have a register page. Im having trouble with hashing and salting the password.
Then I ...
3
votes
2answers
932 views
Appending a secret (pepper) to Argon2 password hashes
I've read quite a bit of the StackExchange and HackerNews debates on the user of "peppers" in password hash security. There are a number of different implementations of the idea of a pepper, ranging ...
1
vote
3answers
258 views
Hash pepper in web application possible?
I have read a few articles and several question on here about hashing correctly.
While hashing, adding salt and especially pepper is primarily a server side use case, I am interested in the ...
0
votes
0answers
502 views
bcrypt.checkpw() returning true for different salt+hash
new user here. I've tried searching for an answer but I don't think I know the correct terms to search for. I've tried things like "bcrypt same password different hash" but can't find an answer to my ...
0
votes
2answers
1k views
How long does it take to compute hashes using the MD5 hash algorithm? [closed]
1) If one iteration of MD5 takes x seconds, is it safe to assume that n iterations of MD5 takes n * x seconds?
2) Will salted and unsalted versions of md5 hash algorithms take approximately the same ...
0
votes
1answer
3k views
hashcat - cracking a salted sha256
Given a SHA512 hash, a salt, and username I am trying to crack the hash using hashcat. Every example I've found used a hashfile as input, is there way to provide salt and hash via commandline without ...
-1
votes
1answer
186 views
Best tool for cracking SHA-1s with unique pre and post salts? [closed]
I can't find a tool that supports cracking SHA-1s with different pre and post salts. Any suggestions?
0
votes
0answers
36 views
Where do salts come from? [duplicate]
A salt can be a random value and length. The hash and the salt are stored in the database.
Is there a separate salt generator function used? Is it just a random generator?
Does it need to be a ...
-1
votes
1answer
182 views
Does salted password hashes expose users with blank passwords?
Traditionally, a 'salted' hash of the password is stored along with the salt so there is no plaintext in the database and still be able to authenticate the password.
The salting process consists of ...
3
votes
2answers
288 views
BCrypt workfactor for salt?
From what I read here: How to securely hash passwords?, you're supposed to iterate the hashing. However in the implementation of BCrypt for .Net uses the workfactor (2^wf iterations) in the '...
1
vote
1answer
88 views
Recover SHA1-encoded email addresses
Say you have a list of SHA1 hashes which are all encoded with the same salt. All of these are email addresses and you know at least one combination of hash and email address.
Is it possible to use a ...
0
votes
0answers
3k views
How do I combine a salt and hash for John The Ripper? [duplicate]
I found a password hash
*61A2BD98DAD2A09749B6FC77A9578609D32518DD
I found a salt somewhere else.
How do I combine these to feed into John the Ripper?
When I run John on the hash (minus the *) John ...
0
votes
1answer
124 views
Implementing SRP without storing the salt anywhere
I am attempting to use SRP to verify clients when they authenticate with a webserver, so that the password is never sent over the wire.
Looking at the SRP procedure, when a client registers with the ...
3
votes
1answer
375 views
Difference in between salt and random padding in cryptography
I would like to know what is difference in between using salt and using "random padding" in cryptography. I am familiar with term salt when we use it with hashing. How does "random padding" differ ...
3
votes
3answers
730 views
How is a pepper used with salted passwords?
How is a pepper (a large constant number) used after a password has been salted with a salt by a hashing function such as bcrypt?
From Sybex CISSP Official Study Guide, 8th Edition (2018):
Adding ...
2
votes
1answer
122 views
Slow Hashing Without a Salt?
I'm trying to design a security scheme that involves a shared secret but isn't a traditional account password situation. The server would store a set of "keys", each of which has a blob of data ...
3
votes
4answers
618 views
Common format to send encrypted data + IV?
I have an app that receive data from third parties using various protocols: MQTT, HTTP, AMQP, ...
Some clients cannot use TLS (iot devices without TLS support), so we need to find some compact and ...
1
vote
1answer
672 views
Hash a secret API key with a random salt instead of sending sending it alone in REST API
Say, I have an internal https API endpoint used only by me being the admin.
In each each request I send a secret API key for authentication. And I'm fine with this solution.
curl -x PUT .......
-...
3
votes
4answers
1k views
Securing hashes of short enumerated values
The system manages and stores sensitive data of short strings.
Because the sensitive data is of an enumerated type with limited set of well known values, the attacker could easily iterate all the ...
-1
votes
1answer
110 views
How to securely generate and store the salting for password hash? [duplicate]
Assume a client authenticates using the password, which includes hashing and salting. The hash values are stored in a remote database server.
Questions:
For the hash values stored in the database ...
0
votes
2answers
740 views
Generating salt for hash that occurs on server and client
Let's say I have an API call which is supposed to check if email address exists in the DB, without transmitting the actual email address.
For that purpose, I've decided to store SHA256 hash of the ...
1
vote
1answer
12k views
How can I use openssl to decrypt AES-encrypted data using the key and initialization vector?
I am attempting to follow the example in this question:
Where is the salt on the OpenSSL AES encryption?
but I'm having some trouble decrypting using the key and initialization vector.
When I ...
2
votes
1answer
640 views
Why has salt option been deprecated as of PHP 7.0.0?
http://php.net/manual/en/function.password-hash.php
Is that less secured ?
echo password_hash("rasmuslerdorf", PASSWORD_DEFAULT);
=> $2y$12$QjSH496pcT5CEbzjD/vtVeH03tfHKFy36d4J0Ltp3lRtee9HDxY3K
...
3
votes
3answers
233 views
Can one find the value of a “constant salt” if they can set the password and get the hash?
Saying we have an oracle that an attacker can use as many time as they want. The attacker can send a non-empty password to this Oracle. The Oracle hashes the password using sha256(password + pepper), ...
2
votes
1answer
453 views
How to store secret key used for hashing?
I am trying to figure out a secure way to store secret keys used in the hashing of social security numbers.
The idea is for de-identification of research subjects yet still permitting follow-ups ...
3
votes
2answers
221 views
Can hash collisions be eliminated by hashing twice? [duplicate]
Suppose I have a file verified.txt that has a certain hash X.
An attacker can form an impostor.txt that replicates the hash with different content, resulting in a collision for a given algorithm, and ...
