↧
Answer by Maarten Bodewes for Do very short values make a peppered hash less...
Your example seems to use a unique number. If value is not unique then duplicates will show up in the hash field. In that case an attacker could possibly request you to hash a specific value and check...
View ArticleAnswer by fgrieu for Do very short values make a peppered hash less secure?
The assumption seems to be that the adversary wants to confirm a guess of $\mathtt{value}$ given $\mathtt{hash}=\operatorname{SHA-256}(\mathtt{value}\mathbin\|\mathtt{pepper})$, for unknown random...
View ArticleDo very short values make a peppered hash less secure?
Given many very short (or low-entropy) values – like 6-digit numbers – that are stored as hashes using a fixed secret pepper, e.g.:value | pepper | hash = SHA265(value +...
View Article