Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 6203

Secure Hash Algorithm is a family of cryptographic hash functions published by NIST. This includes SHA-1, and the SHA-2 and SHA-3 families of functions. SHA-1 is deprecated for all usages.

1 vote
Accepted

Is it insecure to use PBKDF2 on a SHA1 hashed password?

This is a pretty common interim conversion scenario. If you have the luxury of having control over the code that manages authentication and can support both methods simultaneously, this is operational …
Royce Williams's user avatar
2 votes

Does Rehashing a weak hash with a strong algorithm make it strong?

There is an additional danger when wrapping unsalted hashes - the "hash shucking" problem (disclosure: my answer) Briefly, if an unsalted hash also appears in any other corpus, even those not yet crac …
Royce Williams's user avatar
23 votes
Accepted

How secure is BCRYPT(SHA1(Password))

First of all, thank you for taking the time to determine how to do this correctly and improve security for your users! Migrating password storage while taking legacy hashes into account is relatively …
Royce Williams's user avatar
7 votes

How many rounds of Bcrypt to use for security equivalent to SHA256?

I'd say even bcrypt cost 5 (the minimum cost) is a good bit stronger than 10K rounds of SHA256 ... but that's still much lower than you want. Attacking 10K rounds of SHA256, no GPU suite I'm aware of …
Royce Williams's user avatar
2 votes

Is it safe to use SHA-512 to identify credit card?

.: SHA-512 Hash.Target......: 82a9dda829eb7f8ffe9fbe49e45d47d2dad9664fbb7adf72492...e5082f Time.Started.....: Sat Jan 20 13:37:27 2018 (17 secs) Time.Estimated...: Sat Mar 11 13:51:06 2023 (5 years, 50 … Session..........: hashcat Status...........: Running Hash.Type........: SHA-512 Hash.Target......: 4e65a06d53242aade56bd09f79dbda13cb945f459fd6544fccb...e5894a Time.Started.....: Sat Jan 20 13:46:42 2018 …
Royce Williams's user avatar
5 votes
Accepted

How can I extract salt from encoded base64 Salted SHA 256 hashed password

This is LDAP SSHA256, known to hashcat as mode 1411, and cracks successfully as such: $ cat ssha256.hash {SSHA256}LGkJJV6e7wPDKEr3BKSg0K0XDllewz9tvSNSaslDmIfPFmyuI5blUK/QsTXjvgFKLlMQm1jPC7K7z/KaD4zoHQ …
Royce Williams's user avatar