Date: Thu, 7 Dec 2017 18:52:31 -0600 From: Jeffrey Goldberg <jeffrey@...dmark.org> To: passwords@...ts.openwall.com, Jim Fenton <fenton@...epopcorn.net> Subject: Re: Real world password policies On Dec 7, 2017, at 4:54 PM, Jim Fenton <fenton@...epopcorn.net> wrote: > > On 11/8/17 2:32 PM, Jim Fenton wrote: >> The recommendation to do an additional keyed hash with a key stored >> separately is completely new in 800-63. > To close the loop on this, I have published a simple utility for doing > this. The code is at > > https://github.com/jimfenton/rehash Thanks. That is nice and to the point. Is there any particularly reason you choose PBKDF2 instead of HMAC? There’s nothing really wrong with using PBKDF2 here, but it is really just a round about way of using HMAC. Furthermore HMAC is in the standard library. https://golang.org/pkg/crypto/hmac/ Cheers, -j Download attachment "smime.p7s" of type "application/pkcs7-signature" (3367 bytes)
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.