[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <EC976D70-AF23-4B2A-BB72-9DD53518B7CC@goldmark.org>
Date: Thu, 7 Dec 2017 18:52:31 -0600
From: Jeffrey Goldberg <jeffrey@...dmark.org>
To: passwords@...ts.openwall.com,
Jim Fenton <fenton@...epopcorn.net>
Subject: Re: Real world password policies
On Dec 7, 2017, at 4:54 PM, Jim Fenton <fenton@...epopcorn.net> wrote:
>
> On 11/8/17 2:32 PM, Jim Fenton wrote:
>> The recommendation to do an additional keyed hash with a key stored
>> separately is completely new in 800-63.
> To close the loop on this, I have published a simple utility for doing
> this. The code is at
>
> https://github.com/jimfenton/rehash
Thanks. That is nice and to the point.
Is there any particularly reason you choose PBKDF2 instead of HMAC? There’s
nothing really wrong with using PBKDF2 here, but it is really just a round about
way of using HMAC. Furthermore HMAC is in the standard library.
https://golang.org/pkg/crypto/hmac/
Cheers,
-j
Download attachment "smime.p7s" of type "application/pkcs7-signature" (3367 bytes)
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
