News for hackers. Stuff that matters.

A comment on Password hack of vBulletin.com. Parent comment

Re:Password hack of vBulletin.com by alexkus on Monday November 18, 2013 @12:27PM (#6755486)
Don't forget that most symmetric encryption algorithms can be used as a hash. Just encrypt a known plaintext (usually all NUL bytes) using the password as the key.
[ Parent | on HN ]
Re:Password hack of vBulletin.com by ReidZB on Monday November 18, 2013 @01:24PM (#6755861)
If you do that and only that, you open yourself up to related-key attacks. A better approach would be to use a well-known scheme like the Merkle–Damgård construction.
[ Parent | on HN ]