Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×

Comment Re:Do not use standard passwords (Score 2) 198

What next? You use 15 or 20 character passwords, or a passphrase of several words.

But for the server side, use key strengthening with something like bcrypt or scrypt.
If it takes 1 second on very fast hardware to hash a single password, then your attacker has to also spend a lot of time on each hash attempt.
scrypt was also designed with custom hardware attacks in mind (it uses lots of memory) so it is still slow and expensive even if the attacker has key derivation logic in an asic or fpga.

If it takes a tenth of a second for an attacker to derive a key (or hash) from a password then a 10 character password is still incredibly strong.
If the passwords have salt (as they should) even a plain english dictionary attack on a 2M password file will take years to finish.

As faster hardware becomes available, you adapt by changing the key derivation parameters.

Comment Re:Who generates 512-bit RSA keys these days? (Score 1) 80

>RSA for example needs two prime numbers as a keypair, so while the key length might be 512 bit, there are actually not that many from those 2^512 numbers to choose from. Also, certain key values are prone to attacks.

How many is not that many? Bruce Schneier in Cryptography Engineering calculates that 1 in 1386 numbers in the 2^2000 bit range is prime. In the 2^512 range primes are even more frequent, according to prime counting estimates.

Comment Re:Taught? (Score 2) 176

It would get very tiresome for everyone to have to explain from axioms and first principles every opinion they held, even if they did reflect upon and study them.
Alternately, do you think people who agree with you on whatever subject have also been "culturally informed" that way?

I am, of course, not talking about capitalism, communism, chalk, or cottonballs, but wearing socks with sandals.

Slashdot Top Deals

He has not acquired a fortune; the fortune has acquired him. -- Bion

Working...