Search Results
Search type | Search syntax |
---|---|
Tags | [tag] |
Exact | "words here" |
Author |
user:1234 user:me (yours) |
Score |
score:3 (3+) score:0 (none) |
Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
Views | views:250 |
Code | code:"if (foo != bar)" |
Sections |
title:apples body:"apples oranges" |
URL | url:"*.example.com" |
Saves | in:saves |
Status |
closed:yes duplicate:no migrated:no wiki:no |
Types |
is:question is:answer |
Exclude |
-[tag] -apples |
For more details on advanced search visit our help page |
Secure Hash Algorithm is a family of cryptographic hash functions published by NIST. This includes SHA-1, and the SHA-2 and SHA-3 families of functions. SHA-1 is deprecated for all usages.
1
vote
Accepted
Is it insecure to use PBKDF2 on a SHA1 hashed password?
This is a pretty common interim conversion scenario. If you have the luxury of having control over the code that manages authentication and can support both methods simultaneously, this is operational …
2
votes
Does Rehashing a weak hash with a strong algorithm make it strong?
There is an additional danger when wrapping unsalted hashes - the "hash shucking" problem (disclosure: my answer)
Briefly, if an unsalted hash also appears in any other corpus, even those not yet crac …
23
votes
Accepted
How secure is BCRYPT(SHA1(Password))
First of all, thank you for taking the time to determine how to do this correctly and improve security for your users!
Migrating password storage while taking legacy hashes into account is relatively …
7
votes
How many rounds of Bcrypt to use for security equivalent to SHA256?
I'd say even bcrypt cost 5 (the minimum cost) is a good bit stronger than 10K rounds of SHA256 ... but that's still much lower than you want.
Attacking 10K rounds of SHA256, no GPU suite I'm aware of …
2
votes
Is it safe to use SHA-512 to identify credit card?
.: SHA-512
Hash.Target......: 82a9dda829eb7f8ffe9fbe49e45d47d2dad9664fbb7adf72492...e5082f
Time.Started.....: Sat Jan 20 13:37:27 2018 (17 secs)
Time.Estimated...: Sat Mar 11 13:51:06 2023 (5 years, 50 … Session..........: hashcat
Status...........: Running
Hash.Type........: SHA-512
Hash.Target......: 4e65a06d53242aade56bd09f79dbda13cb945f459fd6544fccb...e5894a
Time.Started.....: Sat Jan 20 13:46:42 2018 …
5
votes
Accepted
How can I extract salt from encoded base64 Salted SHA 256 hashed password
This is LDAP SSHA256, known to hashcat as mode 1411, and cracks successfully as such:
$ cat ssha256.hash
{SSHA256}LGkJJV6e7wPDKEr3BKSg0K0XDllewz9tvSNSaslDmIfPFmyuI5blUK/QsTXjvgFKLlMQm1jPC7K7z/KaD4zoHQ …