News for hackers. Stuff that matters.
Re:Let them paste passwords by kolinko on Thursday May 18, 2017 @11:36AM (#14368128)
Theoretically, using homomorphic encryption you can both store passwords securely and check them for similarity. :)
Re:Let them paste passwords by dainichi on Thursday May 18, 2017 @11:35PM (#14372845)
If the similarity of ciphertexts reveals information about the similarity of the cleartexts, then given you have the encrypted password and the encryption algorithm, couldn't you guess the cleartext password by performing search? The point about hashes is that nobody can decrypt, although everybody knows the "encryption" algorithm. So not sure that homomorphic encryption would help in this case. Or am I missing something?
Re:Let them paste passwords by amelius on Thursday May 18, 2017 @11:42AM (#14368170)
Comparing the hash values would also work (if done right, hash collisions are extremely rare).