|
Search Results
|
| Post |
Author |
Forum
[asc]
|
Replies |
Views |
Posted |
| |
|
Thread: SQL 2012 password hash
Post: SQL 2012 password hash
| Please include the SQL 2012 password hash; it's identical to 2005, except
0x0200 as an ID instead of 0x0100
SHA-512 instead of SHA1
i.e. a sanitized test version run on SQL Server itself shows th... |
|
Incisive |
Feature Requests
|
11 |
42,563 |
08-17-2012, 11:45 PM |
| |
|
Thread: SQL 2012 password hash
Post: RE: SQL 2012 password hash
| Here's SQL2012 results for the hashcat example file A0.M1300.word:
SELECT example, pwdencrypt(example)
FROM
(SELECT 'carlos' AS example
UNION ALL SELECT 'test'
UNION ALL SELECT 'test1'
UNION ALL... |
|
Incisive |
Feature Requests
|
11 |
42,563 |
08-20-2012, 05:05 PM |
| |
|
Thread: SQL 2012 password hash
Post: RE: SQL 2012 password hash
|
radix Wrote: (08-21-2012, 11:22 AM)
--
I've added this even though SQL documentation advises against using pwencrypt to hash passwords (bad admins will bad admin). Should be available in the next re... |
|
Incisive |
Feature Requests
|
11 |
42,563 |
08-21-2012, 11:46 PM |
| |
|
Thread: PBKDF2/RFC2898/PKCS#5 modes?
Post: PBKDF2/RFC2898/PKCS#5 modes?
| As a less immediate, longer term project, I'd like to request generic PBKDF2 (also known as RFC2898 and PKCS#5) support, in whichever applications can reasonably support it. For hash algorithms, I'd ... |
|
Incisive |
Feature Requests
|
3 |
12,258 |
08-22-2012, 06:28 PM |
| |
|
Thread: PBKDF2/RFC2898/PKCS#5 modes?
Post: RE: PBKDF2/RFC2898/PKCS#5 modes?
| Aside from some applications following the OWASP Password Storage Cheat Sheet:
Django web framework
https://code.djangoproject.com/ticket/15367
https://www.levigross.com/post/18880148948/a-review-of... |
|
Incisive |
Feature Requests
|
3 |
12,258 |
08-27-2012, 10:45 PM |
| |
|
Thread: SIP (MD5)
Post: RE: SIP (MD5)
| It looks like SIP has at least two places that use MD5 digest:
One of which is in the password storage on disk on the SIP server - that's the MD5(username:domain:password).
The other place is duri... |
|
Incisive |
Feature Requests
|
5 |
31,780 |
08-31-2012, 09:13 PM |
| |
|
Thread: Support for new ASP.NET password storage practices
Post: RE: Support for new ASP.NET password storage pract...
| To be fair, PBKDF2(HMAC-SHA1, pw, salt, 1000, 256) is absolutely much better than the previous SHA1(pw, salt). Completely insufficent and quite silly, but still better than we had. PBKDF2(HMAC-SHA-3... |
|
Incisive |
Feature Requests
|
6 |
30,198 |
12-12-2012, 09:30 PM |
