Quantcast
Channel: Do very short values make a peppered hash less secure? - Cryptography Stack Exchange
Browsing latest articles
Browse All 3 View Live

Answer by Maarten Bodewes for Do very short values make a peppered hash less...

Your example seems to use a unique number. If value is not unique then duplicates will show up in the hash field. In that case an attacker could possibly request you to hash a specific value and check...

View Article



Answer by fgrieu for Do very short values make a peppered hash less secure?

The assumption seems to be that the adversary wants to confirm a guess of $\mathtt{value}$ given $\mathtt{hash}=\operatorname{SHA-256}(\mathtt{value}\mathbin\|\mathtt{pepper})$, for unknown random...

View Article

Do very short values make a peppered hash less secure?

Given many very short (or low-entropy) values – like 6-digit numbers – that are stored as hashes using a fixed secret pepper, e.g.:value | pepper | hash = SHA265(value +...

View Article
Browsing latest articles
Browse All 3 View Live




Latest Images