News for hackers. Stuff that matters.

A comment on "YOLO" is not a valid hash construction. Parent comment

Re:"YOLO" is not a valid hash construction by lilyball on Sunday August 25, 2024 @01:21AM (#41344611)
PBKDF2 is at least better than YoloPBKDF (which looks rather like PBKDF1). Besides brute-forcing, YoloPBKDF/PBKDF1 has a maximum key length (the length of the hash function output) whereas PBKDF2 can construct longer keys. PBKDF2 also uses a pseudorandom function like HMAC-SHA-1 instead of just a hash function, and I'm assuming that change was done because it strengthens the security in some fashion.

In any case, if you have the choice of making "aggressively mediocre" passwords harder to crack, is there a reason not to do so?

[ Parent | on HN ]
Re:"YOLO" is not a valid hash construction by tialaramex on Sunday August 25, 2024 @05:08AM (#41345755)
> In any case, if you have the choice of making "aggressively mediocre" passwords harder to crack, is there a reason not to do so?

"All features start out with minus 100 points" (Eric Gunnerson, popularized via Raymond Chen)

[ Parent | on HN ]