In principle you take the password hash function itself as reduction function. You do not need to find the original password, but only some input which is hashed to the same value as the password.

------------------------------------------------------------------------

Securing Apache Web Server wi

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

>
> I know that and you probably misread the question or my explanation was
> not clear enough.
>
> My question was: is hashing two or three times (without a salt) a secure
> method or is it as secure as hashing only one time without salt?
>

Oh sor

[ more ]  [ reply ]

Hi all,

This may well be a silly question but, with this recent hashed password leakage, I want to ask something about properly hashing.

The "manuals" say that we should create a salt and then hash it. But, since calculating an hash is a "relative simple" operation (in matter of processing power),

[ more ]  [ reply ]

W32dasm or gdb
Google one of them +tutorial

Or some decompilators, petools

Envoyé à partir de mon Windows Phone
De : a bv
Envoyé : 11/06/2012 16:13
À : security-basics (at) securityfocus (dot) com [email concealed]
Objet : Software static analysis
Hi,

Being experienced in the security field but not having a software
backgrou

[ more ]  [ reply ]