Browsing index pages (3 articles)
↧
Do very short values make a peppered hash less secure?
Given many very short (or low-entropy) values – like 6-digit numbers – that are stored as hashes using a fixed secret pepper, e.g.:value | pepper | hash = SHA265(value +...
View ArticleAnswer by fgrieu for Do very short values make a peppered hash less secure?
The assumption seems to be that the adversary wants to confirm a guess of $\mathtt{value}$ given $\mathtt{hash}=\operatorname{SHA-256}(\mathtt{value}\mathbin\|\mathtt{pepper})$, for unknown random...
View ArticleAnswer by Maarten Bodewes for Do very short values make a peppered hash less...
Your example seems to use a unique number. If value is not unique then duplicates will show up in the hash field. In that case an attacker could possibly request you to hash a specific value and check...
View Article
Browsing index pages (3 articles)