lkml.org 
[lkml]   [1999]   [Jun]   [14]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
SubjectRe: R: Do not use stock RedHat 6.0 kernels with SMBFS! [OFF-TOPIC]
From
   Date: 	Fri, 11 Jun 1999 13:05:01 -0400
From: Justin Hahn <jehahn@raven.bu.edu>

aw> On Thu, 10 Jun 1999, Steve Dodd wrote:
>>
>> Rubbish. Store a secure one-way hash of the password. The problem is just
>> in choosing a secure algorithm.
aw>
aw> No, the one-way hashes are still sensitive (more so than a shadow file).

Explain this. Any decent hash function has the following properties:

- non invertible (or not trivially so)

(note that a good hash function need not be bijective, and I'd
conjecture that it shouldn't be)

I don't see the sensitivity here.

The problem is that user's passwords are in a much smaller space, so you
can simply try to invert the has by trying all possible "typable"
passwords, which is small enough that that a brute-force attack is
tractable.

- Ted

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:52    [W:0.326 / U:0.088 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site