phc-discussions - Re: [PHC] Passwords15 BSidesLV talks

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <418FF06C-6F77-4915-890F-F5810E3A19EA@goldmark.org>
Date: Fri, 14 Aug 2015 13:40:06 -0500
From: Jeffrey Goldberg <jeffrey@...dmark.org>
To: discussions@...sword-hashing.net
Subject: Re: [PHC] Passwords15 BSidesLV talks

On 2015-08-13, at 4:49 PM, Greg Zaverucha <gregz@...rosoft.com> wrote:

> Thanks Alexander!
> For folks on this list who are interested and familiar with crypto, it may be faster to look at my tech report explaining the idea
> http://research.microsoft.com/apps/pubs/default.aspx?id=252097 

Thanks.

As I said then. This is one of those really cool ideas that makes perfect sense once someone actually points it out. I’ve always been bothered by the fact that an attacker may just need to decrypt a single block or check a MAC while the defender needs to decrypt the whole thing, but I never really thought about doing anything about it. So thanks again.

Cheers,

-j