News for hackers. Stuff that matters.

A comment on How crackers ransack passwords like “qeadzcwrsfxv1331”. Parent comment

Re:How crackers ransack passwords like “qeadzcwrsfxv1331” by csense on Tuesday May 28, 2013 @05:23AM (#5779033)
What if a site uses 128-bit salts generated by a good (perhaps hardware-based) RNG?
[ Parent | on HN ]
Re:How crackers ransack passwords like “qeadzcwrsfxv1331” by mikegioia on Tuesday May 28, 2013 @07:24AM (#5779293)
That will remove pre-computed rainbow tables from the equation.
[ Parent | on HN ]
Re:How crackers ransack passwords like “qeadzcwrsfxv1331” by _b8r0 on Tuesday May 28, 2013 @10:07AM (#5780108)
Only really for the time being (and a considerable time to come, Quantum and Biological computing enhancements notwithstanding) but for a salt that big it makes far much more sense to use a key derivation function as you're effectively generating two keys otherwise (one user generated, the other - salt - via PRNG).
[ Parent | on HN ]