[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: RFC2256: userPassword


Paul Leach wrote:

> And, offline parallelizable precomputed dictionary attacks, while vendor
> specific, are quite feasible.

Especially, when no salt is used ;-)  I know, I implemented last year such
thing.  Very instructive.

> Which is all I wanted to warn people about
> when this started. SHA and MD5 are NOT strong against this kind of attack.

It's deeper than that.  No style of user-keyable credential is strong enough
now.  Users don't provide enough entropy.  Password fields can be enlarged
as much as we want, but there is so much entropy people will use.  The
entropy used by the most security-conscious users is now at reach and it is
only getting worse.  By the hour.

Julio