Full Disclosure mailing list archives

Re: Re: choice-point screw-up and secure hashes


From: Valdis.Kletnieks () vt edu
Date: Sat, 19 Mar 2005 18:56:31 -0500

On Sat, 19 Mar 2005 23:02:36 GMT, Jason Coombs said:
reverse hashing

By reverse hashing you mean defeating the protection by forward hashing all possible SSNs, presumably.

No, that's me writing in a hurry and failing to make clear that if you're
using an invertible function, you'll have sub-functions to do the forward
and reverse functions, and both will probably be compromised at the same
time as  the actual hash value....

Attachment: _bin
Description:

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: