Recent

Author Topic: Hash It Like You Mean It — Proper password hashing in FreePascal  (Read 1084 times)

mariuz

  • New Member
  • *
  • Posts: 41
    • http://flamerobin.org

Thaddy

  • Hero Member
  • *****
  • Posts: 14223
  • Probably until I exterminate Putin.
Re: Hash It Like You Mean It — Proper password hashing in FreePascal
« Reply #1 on: May 29, 2020, 01:22:01 pm »
One - but really big! - mistake in an otherwise excellent article.

Not all hashes are one-way. crc hashing or solomon-reed are also technically hashing and have restoring properties. There are more polynomial hashing algorithms with the same properties.
Also note there are more hashes that leak information and/or produce the same hash over different data (hash collisions) than there are proper one way secure hashes.

Best example is the crc32 hash that gives us restore properties in e.g. partially damaged zip archives. Or solomon-reed to play partially damaged CD/DVD etc.

As opposed to secure hashing only, which are  truely one way and do not contain information - when properly designed, note e.g. RC4 and MD5 are not - to restore, but only to verify.


If you correct the article to mean true one-way hashing it is otherwise an excellent introduction.
« Last Edit: May 29, 2020, 01:43:21 pm by Thaddy »
Specialize a type, not a var.

 

TinyPortal © 2005-2018