4 ms·
LastPass breach: The significance of these password iterations
- timcavel 4y ago[dead]
- postpawl 4y agoFor anyone else having trouble finding the “show advanced settings” button: It’s at the bottom of the account settings pop up where ok/cancel buttons usually are.
- AdmiralAsshat 4y agoAs I feared, I changed the iterations myself at some point, and they never "migrated" it to the new value. So it's above the old default, but well below the recommended number of iterations. I don't suppose it being a non-obvious value makes it any more secure? Is an attacker brute forcing the thing likely to try obvious default values first and then give up if they don't work? Or will they simply +1 the iteration count until they hit paydirt?
- palant 4y agoDisclaimer: I’m the author of this article. No, the iteration count is no secret. It’s even exposed via a public API, anyone can query it if they know the email address.
- robin_reala 4y ago…why would you even do that?
- palant 4y agoThe number of iterations is needed for login. The user enters their email address and password, and the app needs to know (before they actually log in) how many iterations to apply. There are approaches like the OPAQUE protocol which avoid having the iterations count in the open, but LastPass didn’t implement that. To their defense, OPAQUE is relatively new.
- AdmiralAsshat 4y agoWell, balls. Thanks for confirming.
- BuildTheRobots 4y ago[1] makes it seem like the number of rounds is included unencrypted at least on the client side binary databases. As it's sent over the wire when downloading the vault, lastpass would _have_ to have that in clear text somewhere. [1] https://github.com/cfbao/lastpass-vault-parser https://github.com/cfbao/lastpass-vault-parser
- stubish 4y agoCan attackers can easily tell the 1 and 500 iteration databases and focus their resources in breaching those ones?
- palant 4y agoDisclaimer: I’m the author of this article. Yes. The number of iterations is presumably stored in the same customers database that they stole. Even if not: the number of iterations can be queried via a public API, anyone can do it if they know the email address.
- foreverCarlos 4y agoInteresting. This is starting to look like gross negligence that might bite LogMeIn really hard.
- Havoc 4y ago>GTX 1080 Ti graphics card (cost factor: less than $1000) can be used to test 346,000 guesses per second. >GeForce RTX 4090 graphics card could test more than 88,000 guesses per second! Guessing we're missing a zero there?
- smoothgrammer 4y agoThe article is missing key data. The password iterations that are set low are client side. The server side is different. The writer of the article needs to retract. https://support.lastpass.com/help/about-password-iterations-lp030027 https://support.lastpass.com/help/about-password-iterations-...
- palant 4y agoDisclaimer: I’m the author of this article. I’m not missing anything. It’s LastPass who finally need to retract this article. I proved back in 2018 that server-side iterations are misimplemented and have no security effect. That’s why they increased the client-side value in the first place. See https://palant.info/2018/07/09/is-your-lastpass-data-really-safe-in-the-encrypted-online-vault/#cracking-the-encryption https://palant.info/2018/07/09/is-your-lastpass-data-really-...