Rainbow Table vs Multiple Hashes - Does this make sense?

Rainbow Table vs Multiple Hashes - Does this make sense?

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Rainbow Table vs Multiple Hashes - Does this make sense? david.leedom 09-19-2006
Posted by on September 19, 2006, 9:06 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I am completly new to security development!!!!

I am trying to develop a method of saving encrypted data. One method I
have used is to create is to encrypt the data and then encrpt it again
N number of times.

Does this buy me anything, other then a slow process?

Another thought was to do the same, but change the encrtyption methods
between iterations.

Is there any value in these aproaches am I making a stupid mistake?

My biggest problem in the past is finding algorithums that work the
same on both Windows and Lunix.


Posted by Todd H. on September 19, 2006, 10:54 am
If you were  Registered and logged in, you could reply and use other advanced thread options
david.leedom@gmail.com writes:
> I am completly new to security development!!!!
>
> I am trying to develop a method of saving encrypted data. One method I
> have used is to create is to encrypt the data and then encrpt it again
> N number of times.
>
> Does this buy me anything, other then a slow process?
>
> Another thought was to do the same, but change the encrtyption methods
> between iterations.
>
> Is there any value in these aproaches am I making a stupid mistake?
>
> My biggest problem in the past is finding algorithums that work the
> same on both Windows and Lunix.

If you're implementing encryption in code, you'll probably get the
best answer from sci.crypt

--
Todd H.
http://www.toddh.net/

Posted by Lassi =?ISO-8859-15?Q?Hippel=E on September 19, 2006, 11:11 am
If you were  Registered and logged in, you could reply and use other advanced thread options
david.leedom@gmail.com wrote:

> I am completly new to security development!!!!
>
> I am trying to develop a method of saving encrypted data. One method I
> have used is to create is to encrypt the data and then encrpt it again
> N number of times.
>
> Does this buy me anything, other then a slow process?

If you use the same key in all rounds, you gain nothing.

> Another thought was to do the same, but change the encrtyption methods
> between iterations.

No better. Don't use several algorithms, use several keys. Google for
Kerkhoffs' Principle.

> Is there any value in these aproaches am I making a stupid mistake?

There is a certain pedagogical value there ;-)

> My biggest problem in the past is finding algorithums that work the
> same on both Windows and Lunix.

Use AES as the encryption algorithm, unless you have a good reason to do
otherwise. There are also well debugged open source libraries out there.
They'll save lots of your time. (And probably your ass, too, several
times...)

BTW, there are also full open source programs that run under many systems,
E.g. TrueCrypt supports both Windows and Linux.
http://en.wikipedia.org/wiki/TrueCrypt

-- Lassi


Posted by on September 19, 2006, 1:48 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Humm that is an issue. I do take my key and hash it with MD5 several
times Key->Hash->Hash. But then I use that key for each iteration.

Thanks for you input.


Lassi Hippel=E4inen wrote:
> david.leedom@gmail.com wrote:
>
> > I am completly new to security development!!!!
> >
> > I am trying to develop a method of saving encrypted data. One method I
> > have used is to create is to encrypt the data and then encrpt it again
> > N number of times.
> >
> > Does this buy me anything, other then a slow process?
>
> If you use the same key in all rounds, you gain nothing.
>
> > Another thought was to do the same, but change the encrtyption methods
> > between iterations.
>
> No better. Don't use several algorithms, use several keys. Google for
> Kerkhoffs' Principle.
>
> > Is there any value in these aproaches am I making a stupid mistake?
>
> There is a certain pedagogical value there ;-)
>
> > My biggest problem in the past is finding algorithums that work the
> > same on both Windows and Lunix.
>
> Use AES as the encryption algorithm, unless you have a good reason to do
> otherwise. There are also well debugged open source libraries out there.
> They'll save lots of your time. (And probably your ass, too, several
> times...)
>
> BTW, there are also full open source programs that run under many systems,
> E.g. TrueCrypt supports both Windows and Linux.
> http://en.wikipedia.org/wiki/TrueCrypt
>=20
> -- Lassi


Similar ThreadsPosted
Window Washer: False Sense of Security August 23, 2004, 11:32 am
Rainbow Series November 22, 2005, 10:33 am
Hashes and Passwords May 21, 2006, 5:36 am
multiple signatures in an xml file April 24, 2006, 1:34 pm
Using multiple virus scanners on the same system? November 22, 2008, 7:22 am
Concurrent multiple/simultaneous session restriction. January 6, 2006, 5:34 am
Yahoo Multiple Vulnerabilities ( Authentication Bypass, Session Binding, Cookie Encoding Security Weakness, Cross-Site Scripting and URL Redirection ) June 21, 2006, 1:51 pm
Make fortune July 9, 2004, 5:05 am
Windows XP: Trying to make a ISC January 25, 2005, 1:19 pm
Make A Fortune For Only $6 - MUST BE HONEST!!! July 11, 2004, 4:11 pm

The site map in XML format XML site map

Contact Us | Privacy Policy