Erik van Straten<p><span class="h-card" translate="no"><a href="https://hachyderm.io/@cubeos" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>cubeos</span></a></span> : salts sind meist nützlos.</p><p>Aber zuerst: wieviele Accounts hast du? Für die meiste Menschen ist es unmöglich viele starke Passworter im Kopf zu speichern und zu erinnern. Nur deshalb: Password-Manager!</p><p>Salz: moderne NVidia GPU''s sind so schell dass man keine Rainbow Tables braucht. Wenn den Attacker Hash + Salz kennt, gehts los ("Pepper" würde helfen wenn nicht gestohlen/kopieert).</p><p>Screenshot aus <a href="https://gist.github.com/Chick3nman/32e662a5bb63bc4f51b847bb422222fd" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">gist.github.com/Chick3nman/32e</span><span class="invisible">662a5bb63bc4f51b847bb422222fd</span></a>.</p><p><span class="h-card" translate="no"><a href="https://social.bau-ha.us/@CCC" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>CCC</span></a></span> </p><p><a href="https://infosec.exchange/tags/PaswordHashes" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>PaswordHashes</span></a> <a href="https://infosec.exchange/tags/Salt" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Salt</span></a> <a href="https://infosec.exchange/tags/Pepper" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Pepper</span></a> <a href="https://infosec.exchange/tags/Argon2" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Argon2</span></a> <a href="https://infosec.exchange/tags/PBKDF2" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>PBKDF2</span></a> <a href="https://infosec.exchange/tags/BCrypt" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>BCrypt</span></a> <a href="https://infosec.exchange/tags/Nuetzlos" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Nuetzlos</span></a></p>