phc-discussions - RE: [PHC] Are password trailing 0's a problem?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: Sat, 8 Mar 2014 00:30:06 +0000
From: Peter Gutmann <pgut001@...auckland.ac.nz>
To: "discussions@...sword-hashing.net" <discussions@...sword-hashing.net>
Subject: RE: [PHC] Are password trailing 0's a problem?

"Dennis E. Hamilton" <dennis.hamilton@....org> writes:

>I do think using PBKDF2 with c == 1 is a strange act.

It's used in a number of places when you need a straight KDF, rather than a
password-processing function.  For example if you have a single key and need
to create two distinct keys for encrypt and MAC then you can use PBDF2 with c
= 1.

Peter.