3 ms·
If you're using a keyed hash, then dictionary attacks can't be parallelized.
by recursive 9y ago
If you're using a keyed hash, then dictionary attacks can't be parallelized.
- Terr_ 9y agoWouldn't you want to use a salt instead?
- rocqua 9y agoYou use the 'salt' as the key in the keyed hash. The difference occurs mostly when you start chaining hashes. In that case, a salt is only relevant in the first hash, whereas the keyed hash needs the key at every hash round.
- Terr_ 9y ago> You use the 'salt' as the key in the keyed hash. I thought the two schemes were conceptually different, leading to different engineering tradeoffs: With salts, you assume the attacker can gain access to it. With keyed-hashing, you simply have a second piece of equally-secret information, and you hope it doesn't get leaked.