7 ms·
Does anyone have any more specific information on whether they just called crypt(key,salt) or actually used a larger salt with a call to encrypt()? The crypt()
by wizardishungry 16y ago
Does anyone have any more specific information on whether they just called crypt(key,salt) or actually used a larger salt with a call to encrypt()? The crypt() function only takes a 12 bit salt which is marginally helpful against rainbow tables.
- tptacek 16y agoBecause you're worried about attackers constructing four thousand rainbow tables?
- wizardishungry 16y agoYou wouldn't need 4096 if the choice of the salt was non-random; some versions of Unix used the first 2 characters of the username. What's the space requirement for a single rainbow table?
- tptacek 16y agoI don't know, but none of what they did was even marginally useful against iterated password crackers, so, change your password.