[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords

To: "'Jim Knoble'" <jmknoble@xxxxxxxxx>, <bugtraq@xxxxxxxxxxxxxxxxx>
Subject: RE: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
From: "Mike Fratto" <mfratto@xxxxxxx>
Date: Thu, 21 Apr 2005 15:25:23 -0400

 
> I thought the idea of the salt was to aid in expanding the 
> keyspace. Even though the salt is known (in traditional Unix 
> passwd/shadow/master.passwd databases, 

I am pretty sure the intent the salt is to make pre-computation of a
dictionaries infeasable due to storage requirements. It doesn't really add
to the keyspace because the salt is known and doesn't have to be guessed.

Follow-Ups:
- Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  - From: Stephen Frost
- Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  - From: Jim Knoble

References:
- Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  - From: Jim Knoble

Prev by Date: Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted
Next by Date: Re: Microsoft Windows image rendering DoS vuln
Previous by thread: Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
Next by thread: Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
Index(es):
- Date
- Thread