Re:Auditor's response to "Our security auditor is an idiot" ...
by klodolph on Friday July 29, 2011 @10:46AM
(#2822032)
I'm not exactly sure what you're saying, but it sounds like you're saying bcrypt is reversible? It's not... it's "based on" a block encryption algorithm in the sense that it uses the encryption algorithm's key scheduling functions. Irreversibility is the intent.
[ Parent
| on HN ]
Re:Auditor's response to "Our security auditor is an idiot" ...
by JoachimSchipper on Friday July 29, 2011 @02:26PM
(#2823111)
bcrypt isn't reversible (with respect to the password). The point is that Blowfish(key1, "message") is not at all similar to Blowfish(key2, "message"). This is called resistance to related-key attacks (look this up for a formal definition), and is an explicit design goal of every real-world block cipher.
bcrypt is just Blowfish(key-derived-from-salt-and-password, "OrpheanBeholderScryDoubt"), so it inherits this property.
Re:Auditor's response to "Our security auditor is an idiot" ...
by pyre on Friday July 29, 2011 @11:08AM
(#2822171)
It's not reversible, but block encryption should be easy to compare for similarity. If the old password is 5 blocks, and 4 of 5 blocks match the new password (in order)... I'm guessing this is what the gp was talking about. (of course block size matters, if all passwords are a single block that doesn't help)