4 ms·
Cryptographic hashing decreases entropy because it is based on a compression function. Most password stretching algorithms are not optimal in that respect, espe
by jonathanstrange 6y ago
Cryptographic hashing decreases entropy because it is based on a compression function. Most password stretching algorithms are not optimal in that respect, especially if they repeatedly lengthen the plaintext before hashing it again.
There are constructions to avoid this problem but they are not commonly used.
- crpatino 6y agoPlease elaborate. Your complain comes about passive-aggressive if you do not explain why the problem is a problem or how to solve it.
- deleted 6y ago[deleted]
- bmm6o 6y agoThis is definitely true as far as the math goes, applying a prf does reduce entropy. But does it decrease it in a way that an attacker can take advantage of?