Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

per-hashes-file salt instead of per-secret salt #5

Open
philsnow opened this issue Jan 31, 2017 · 2 comments
Open

per-hashes-file salt instead of per-secret salt #5

philsnow opened this issue Jan 31, 2017 · 2 comments

Comments

@philsnow
Copy link

If I understand correctly, a blueflower hashes file contains a single salt that is used for all the secrets in that file.

An attacker would have to recalculate rainbow tables once (taking into account this one salt) to then efficiently try to reverse the hashes in the file. A salt-per-secret model would be stronger.

@veorq
Copy link
Owner

veorq commented Feb 1, 2017

That could be an optimization indeed, I may implement it later, or happy to take a PR :)

@JulesDT
Copy link
Contributor

JulesDT commented Jul 26, 2018

I think the PR above (#8) fixes this issue :)
Can be closed

cc @philsnow

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants