eruquen

4 ms·

1. 1.▲
   by eruquen 10y ago

   Rustbelt targets unsafe and safe code. In addition, it will also deal with concurrency (incl. weak memory). Disclaimer: I am affiliated with the project.
2. 2.▲
   by eruquen 12y ago

   There is on-going research on more modular frameworks that allow for faster implementation of optimizations. One of them is [1]. I worked on that project and implemented (and proved correct) several optimizations within just weeks. This is
3. 3.▲
   by eruquen 15y ago

   First of all, you come off as condescending when you say "it's a silly idea" and say that the work factors you mentioned are "real" ones, thereby implying that adding more combinations is not a real work factor. Second, the actual usefulnes
4. 4.▲
   by eruquen 15y ago

   You are right, I should clarify this. For the authentication server the time required jumps from close to nothing to a few ms. For the attacker, the time jumps from a few hours or days to a few years or decades. This asymmetry is what I mea
5. 5.▲
   by eruquen 15y ago

   Nobody mentioned pepper yet. Not the "static salt" variant which you might find while googling. That is just more security by obscurity. I'm talking about adding a random string of fixed length characters to the (salted) password that is no