News for hackers. Stuff that matters.
Re:Peppering (Password Storage) by stouset on Thursday July 02, 2020 @12:25PM (#23714953)
To prevent hash reuse, you can just use a long, cryptographically-random salt. There exist zero reused bcrypt, scrypt, and argon2 hashes globally (assuming “good” implementations that generate salts on users’ behalf).
Re:Peppering (Password Storage) by Sherl on Thursday July 02, 2020 @08:25PM (#23719660)
Yes some implementation consider atomic time apart from thermal noises when generating them.
Re:Peppering (Password Storage) by GoblinSlayer on Friday July 03, 2020 @09:04AM (#23723598)
It's about an attack on prehash described later in the article.