Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 3 Sep 2012 21:08:45 +0200
From: Frank Dittrich <>
Subject: Re: How should one select PLAINTEXT_LENGTH in a format

On 08/23/2012 04:37 PM, Claudio André wrote:
> How do i choose a number to use as the maximum length of a plaintext
> password. 16, 24, 32, ...?
> Do you guys have a rule? Or, at least, advices?

In addition to what others suggested:
-IMHO it makes not much sense to support a maximum length which is
larger than what the software which uses the hash format supports
-it is a good idea to document the maximum plaintext length (in
bytes/and or charachers) supported by the software which uses the hash
format (if you are afraid that maximum length might change over time,
document the release you checked)


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.