[148693] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: [Cryptography] Why don't we protect passwords properly?

daemon@ATHENA.MIT.EDU (Bill Frantz)
Tue Dec 24 23:31:05 2013

X-Original-To: cryptography@metzdowd.com
Date: Tue, 24 Dec 2013 20:25:03 -0800
From: Bill Frantz <frantz@pwpconsult.com>
To: cryptography@metzdowd.com
In-Reply-To: <788204183.20131225013755@gmail.com>
Errors-To: cryptography-bounces+crypto.discuss=bloom-picayune.mit.edu@metzdowd.com

T24gMTIvMjUvMTMgYXQgNDozNyBQTSwgcGludGVya3JAZ21haWwuY29tIChLcmlzenRpw6FuIFBp
bnTDqXIpIHdyb3RlOgoKPmF0dGFja2VycyB3aWxsIHVzZSB3aGF0ZXZlciB0aGV5IGNhbi4gYW5k
IGknbSBiZXR0aW5nIGEgdGhvdXNhbmQgYnVja3MKPm9uIGZpbGxpbmcgdGhlIFJBTSB3aXRoIHNl
bnNpdGl2ZSBkYXRhIHdpbGwgYmUgYW4gYXR0YWNrIHZlY3RvciBzb29uZXIKPm9yIGxhdGVyLgoK
UG9zc2libHkgY29ycmVjdCwgYnV0IG9ubHkgaWYgaXQgaXMgYSBjaGVhcGVyIGF0dGFjayB0aGFu
IApvdGhlcnMuIFRoZXJlIGFyZSBzbyBtYW55IGNoZWFwZXIgYXR0YWNrcyB0aGF0IHRoaXMgYXR0
YWNrIGlzIApvbmx5IGEgbG9uZyByYW5nZSBjb25zaWRlcmF0aW9uLiBJdCdzIGFuIGludGVyZXN0
aW5nIGludGVsZWN0dWFsIApjaGFsbGVuZ2UsIGJ1dCBub3QgeWV0IG9mIHByYWN0aWNhbCBpbXBv
cnRhbmNlLgoKCj4+VGhlIGNvbGQgYm9vdCBhdHRhY2sgZ29lcyBhd2F5IGlmIHlvdSBsZWF2ZSB5
b3VyIGRldmljZSBvZmYKPgo+aXQgaXMgbm90IHNhdGlzZmFjdG9yeSB0byBsaXN0IHRoZSBzaXR1
YXRpb25zIGluIHdoaWNoIGFuIGF0dGFjayBpcwo+bm90IGZlYXNpYmxlLiB3ZSB3YW50IHRvIGtu
b3cgd2hlbiBpdCBpcy4KCk9LLCB3aGVuIGlzIHRoZSBjb2xkIGJvb3QgYXR0YWNrIGEgcHJhY3Rp
Y2FsIGF0dGFjaz8KCgo+PlN3YXAgZW5jcnlwdGlvbiBpcyB0aGUgc3dlZXQgc3BvdCBvZiBjcnlw
dG9ncmFwaHkKPgo+c3dhcCBlbmNyeXB0aW9uIGlzIG5pY2UsIGJ1dCBhdHRhY2tzIGFnYWluc3Qg
bWVtb3J5IGFyZSBub3QgbGltaXRlZCB0bwo+dGhhdC4uLgoKVGhlIG9yaWdpbmFsIHF1ZXN0aW9u
IHdhcyBhdHRhY2tzIGFnYWluc3Qgc3dhcCBpbWFnZXMgb24gZGlzay4gCkVuY3J5cHRpb24gcHJl
dmVudHMgdGhhdCBhdHRhY2sgYW5kIGlzIGF2YWlsYWJsZSBvbiBtYW55IHN5c3RlbXMgCmJ5IGNo
ZWNraW5nIGFuIG9wdGlvbi4KCgo+UkFNIGlzIHNoYXJlZCBvbiBIVyBsZXZlbCBiZXR3ZWVuIENQ
VXMsIHZlcnkgaGFyZCB0byBwcm90ZWN0IG9uCj5hIFZNLCBkYXRhIHRyYXZlbHMgb24gdGhlIGJ1
cyB3aGljaCBlbWl0cyBFTSwgZXRjLi4uCgpJbiBnZW5lcmFsLCBwcm90ZWN0aW5nIG9uZSBWTSBm
cm9tIGFub3RoZXIgVk0gcnVubmluZyBvbiB0aGUgCnNhbWUgaGFyZHdhcmUgaXMgYSBoYXJkIHBy
b2JsZW0uIEFzIHdpdGggbWFueSB0aGluZ3MgaW4gbGlmZSwgaWYgCml0IGh1cnRzLCBkb24ndCBk
byBpdC4KClByb2JhYmx5IHRoZSBiZXN0IGFwcHJvYWNoIGlzIHRvIHByb3ZpZGUgdmlydHVhbCBj
bG9ja3MgdG8gCnByZXZlbnQgdGltaW5nIGF0dGFja3MuIFRvdWdoIGx1Y2sgZm9yIHRpbWVzdGFt
cGluZyBhbmQgcmFuZG9tIApudW1iZXIgZ2VuZXJhdGlvbiB0aG91Z2guIFByb2JhYmx5IHlvdSBj
YW4gYWxsb3cgdGltZXN0YW1waW5nIAphY2N1cmF0ZSB0byB0aGUgc2Vjb25kIGlmIHlvdSBkb24n
dCB1c2UgdGhlIHNlY3JldCB0b28gCmZyZXF1ZW50bHkuIFJhbmRvbSBudW1iZXJzIGNhbiBiZSBw
cm92aWRlZCB0aHJvdWdoIHZpcnR1YWwgCmhhcmR3YXJlIHJhbmRvbSBudW1iZXIgZ2VuZXJhdG9y
cywgYnV0IGFkZHJlc3NpbmcgYWxsIHRoZSAKanVzdGlmaWVkIHBhcmFub2lhIGluIHRoaXMgYXJl
YSB3aWxsIHJlcXVpcmUgZXhhbWluaW5nIHRoZSB3aG9sZSAKc3lzdGVtIGZyb20gaGFyZHdhcmUg
dG8gZmluYWwgdXNlLgoKRU0gYXR0YWNrcyBjYW4gYmUgaW50ZXJlc3RpbmcgcHJhY3RpY2FsIGF0
dGFja3MsIGJ1dCBUZW1wZXN0IApwYWNrYWdpbmcgcHJldmVudHMgdGhlbS4gV2hpbGUgd2UgYXJl
IHdvcnJ5aW5nIGFib3V0IHRoaXMgc3R5bGUgCm9mIGF0dGFjaywgbGV0cyBjb25zaWRlciB0aGUg
bmFub3RlY2ggcXVhZGNvcHRlciB0aGUgc2l6ZSBvZiBhIApkdXN0IG1vdGUgd2hpY2ggY2FuIGxv
b2sgb3ZlciBvdXIgc2hvdWxkZXJzIGFuZCBtb25pdG9yIG91ciBrZXkgCnN0cm9rZXMuIFRoYXQg
ZGV2aWNlIGlzIHByb2JhYmx5IG5vdCB0b28gbWFueSB5ZWFycyBpbiB0aGUgZnV0dXJlLgoKCj4+
VGhlc2UgYXR0YWNrcyBwYWxlIGludG8gaW5zaWduaWZpY2FuY2UgY29tcGFyZWQgd2l0aCB0aGUg
a25vdwo+PmF0dGFja3Mgb24gcGFzc3dvcmRzLgo+Cj5pIHdvdWxkIGFncmVlIHRoYXQgdGhlc2Ug
YXJlIGxlc3MgaW1wb3J0YW50IGlzc3VlcyB0aGFuIHBhc3N3b3JkCj5zdHJldGNoaW5nLi4uCgpQ
YXNzd29yZCBzdHJldGNoaW5nIGNhbiBvbmx5IGxpbWl0IGNlcnRhaW4gYXR0YWNrcy4gSXQgZG9l
cyAKbm90aGluZyB0byBsaW1pdCBhdHRhY2tzIGludm9sdmluZyBjb21wcm9taXNlIG9mIGEgc2l0
ZSdzIApwYXNzd29yZCBmaWxlIGFuZCB0aGUgZW5zdWluZyBkYW1hZ2UuIFRoZSB0ZW5kZW5jeSBv
ZiBwZW9wbGUgdG8gCnVzZSB0aGUgc2FtZSBvciBzaW1pbGFyIHBhc3N3b3JkcyBvbiBtdWx0aXBs
ZSBzaXRlcyBtYWtlcyB0aGlzIAphdHRhY2sgcXVpdGUgZWZmZWN0aXZlLgoKV29ya2luZyB0byBl
bGltaW5hdGUgcGFzc3dvcmRzIGVudGlyZWx5IHNlZW1zIHRvIG1lIHRvIGJlIGEgbXVjaCAKYmV0
dGVyIGFwcHJvYWNoLiBXZSBjb3VsZCB1c2UgY2xpZW50IHNpZGUgVExTIGNlcnRzIHRvZGF5LCBi
dXQgCnRoZXJlIGFyZSBwcm9iYWJseSBiZXR0ZXIgc29sdXRpb25zLgoKQXMgYW4gYXNpZGUsIGFu
ZCBpZiB5b3UgZGVjaWRlIHRvIHJlc3BvbmQgdG8gdGhpcyBwYXJhZ3JhcGgsIApwbGVhc2UgZm9y
ayBhIG5ldyBzdWJqZWN0OiBEb2VzIHRoZXJlIG5lZWQgdG8gYmUgYSByZXZlbnVlIG1vZGVsIAp3
aGljaCBjYW4gc3VwcG9ydCBhIGJ1c2luZXNzIHRvIGdldCB3aWRlIGFkb3B0aW9uIGZvciBhIHNl
Y3VyaXR5IAp0ZWNobm9sb2d5PyBUaGUgcmV2ZW51ZSBmb3IgQ0EgY2VydHMgY2VydGFpbmx5IGhh
cyBlbmNvdXJhZ2VkIGEgCm51bWJlciBvZiBidXNpbmVzc2VzIHRvIHN1cHBvcnQgdGhlIENBIG1v
ZGVsIGZvciBUTFMgc2VjdXJpdHkuIApUaGlzIHN1cHBvcnQgaXMgZXZpZGVuY2VkIGJ5IHN0YW5k
YXJkcyBib2R5IHBhcnRpY2lwYXRpb24gYW5kIFBSIGZsYWNrcy4KCkNoZWVycyAtIEJpbGwKCi0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLQpCaWxsIEZyYW50eiAgICAgICAgfCBSZTogQ29tcHV0ZXIgcmVsaWFi
aWxpdHksIHBlcmZvcm1hbmNlLCBhbmQgc2VjdXJpdHk6CjQwOC0zNTYtODUwNiAgICAgICB8IFRo
ZSBndXkgd2hvICppcyogd2VhcmluZyBhIHBhcmFjaHV0ZSBpcyAKKm5vdCogdGhlCnd3dy5wd3Bj
b25zdWx0LmNvbSB8IGZpcnN0IHRvIHJlYWNoIHRoZSBncm91bmQuICAtIFRlcmVuY2UgS2VsbHkK
Cl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fClRoZSBjcnlw
dG9ncmFwaHkgbWFpbGluZyBsaXN0CmNyeXB0b2dyYXBoeUBtZXR6ZG93ZC5jb20KaHR0cDovL3d3
dy5tZXR6ZG93ZC5jb20vbWFpbG1hbi9saXN0aW5mby9jcnlwdG9ncmFwaHk=

home help back first fref pref prev next nref lref last post