Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Favorites infavorites:mine
infavorites:1234
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with Search options user 3274

Specific to the security of passwords: hashing, entropy, cracking, resets, lockouts, etc.

2
votes
it gives a good point of view about the whole "password cracking operation". Also, it talks about how to create passwords "that aren’t based on known patterns". …
answered Aug 31 '11 by timoh
5
votes
I think passwdqc package (by the creator of John the Ripper) should also be mentioned. pwqcheck from that package is standalone password/passphrase strength checking program.
answered Aug 24 '11 by timoh
1
vote
One way to combine password hash with a secret key is to have a separate device (i.e. HSM) which encrypts password hashes sent from auth server using a key only known by the device itself. At user lo …
answered Nov 27 '14 by timoh
2
votes
Both the algorithms described here suits your description (doesn't require to store plaintext-equivalents on the server, achieves stretching and are simpler than public-key setups): http://openwall.in …
answered May 16 '14 by timoh
1
vote
Yes, this is possible. There are two algorithms described here which both avoids the need to store plaintext-equivalents on the server (while making it possible to authenticate without the need to sen …
answered Jul 12 '13 by timoh