[cryptography] good key stretching practice?

2013-12-28 Thread Kevin

Hello list.  What is the best key stretching method that can be used?

--
Kevin

___
cryptography mailing list
cryptography@randombit.net
http://lists.randombit.net/mailman/listinfo/cryptography


Re: [cryptography] good key stretching practice?

2013-12-28 Thread fred concklin
Check out PBKDF2.

http://en.wikipedia.org/wiki/PBKDF2

Good table if you're not satisfied:

http://crypto.stackexchange.com/questions/6697/bcrypt-vs-key-stretching-md5


On Sat, Dec 28, 2013 at 10:01 PM, Kevin kevinsisco61...@gmail.com wrote:

 Hello list.  What is the best key stretching method that can be used?

 --
 Kevin

 ___
 cryptography mailing list
 cryptography@randombit.net
 http://lists.randombit.net/mailman/listinfo/cryptography

___
cryptography mailing list
cryptography@randombit.net
http://lists.randombit.net/mailman/listinfo/cryptography


Re: [cryptography] good key stretching practice?

2013-12-28 Thread Jeffrey Goldberg
On Dec 28, 2013, at 2:01 PM, Kevin kevinsisco61...@gmail.com wrote:

 Hello list.  What is the best key stretching method that can be used?

Best for what?

If you are trying to stretch from a password to a key and wish to add some 
resistance to password cracking then currently your “mainstream” choices are 
scrypt, PBKDF2, and bcrypt. None of those are perfect, but each will do. PBKDF2 
is the best established, but it is also the most quirky. If you want to play at 
the bleeding edge of this, you can look what has been proposed as part of the 
Password Hashing Competition. 

  https://password-hashing.net

If you don’t need a “slow” hash, then perhaps something like HKDF is right for 
your particular needs.

  http://tools.ietf.org/html/rfc5869

But without having a better sense of what you are trying to achieve, nobody can 
be confident that they are recommending the right thing to you.

Cheers,

-j



signature.asc
Description: Message signed with OpenPGP using GPGMail
___
cryptography mailing list
cryptography@randombit.net
http://lists.randombit.net/mailman/listinfo/cryptography


Re: [cryptography] good key stretching practice?

2013-12-28 Thread RossMcFarlane
Hi everyone, I don't want to waste your time but I'd love to learn some more 
about cryptography, I was recommended this mailing list but its aimed well 
above my standard. I'm based in the UK 17 years old and to be pointed in the 
direction of some good resources would be great, I've watched a lot of the 
YouTube stuff but would like a step up from there.
Hopefully I'll join you again one day ;)
Thanks in advance.
Ross

On 28 Dec 2013, at 09:01 PM, Kevin kevinsisco61...@gmail.com wrote:

 Hello list.  What is the best key stretching method that can be used?
 
 -- 
 Kevin
 
 ___
 cryptography mailing list
 cryptography@randombit.net
 http://lists.randombit.net/mailman/listinfo/cryptography
___
cryptography mailing list
cryptography@randombit.net
http://lists.randombit.net/mailman/listinfo/cryptography


Re: [cryptography] good key stretching practice?

2013-12-28 Thread Kevin

On 12/28/2013 6:02 PM, Jeffrey Goldberg wrote:

On Dec 28, 2013, at 2:01 PM, Kevin kevinsisco61...@gmail.com wrote:


Hello list.  What is the best key stretching method that can be used?

Best for what?

If you are trying to stretch from a password to a key and wish to add some 
resistance to password cracking then currently your “mainstream” choices are 
scrypt, PBKDF2, and bcrypt. None of those are perfect, but each will do. PBKDF2 
is the best established, but it is also the most quirky. If you want to play at 
the bleeding edge of this, you can look what has been proposed as part of the 
Password Hashing Competition.

   https://password-hashing.net

If you don’t need a “slow” hash, then perhaps something like HKDF is right for 
your particular needs.

   http://tools.ietf.org/html/rfc5869

But without having a better sense of what you are trying to achieve, nobody can 
be confident that they are recommending the right thing to you.

Cheers,

-j


That link actually helped me.  Thanks.


--
Kevin

___
cryptography mailing list
cryptography@randombit.net
http://lists.randombit.net/mailman/listinfo/cryptography


Re: [cryptography] good key stretching practice?

2013-12-28 Thread Kevin

On 12/28/2013 6:35 PM, RossMcFarlane wrote:

Hi everyone, I don't want to waste your time but I'd love to learn some more 
about cryptography, I was recommended this mailing list but its aimed well 
above my standard. I'm based in the UK 17 years old and to be pointed in the 
direction of some good resources would be great, I've watched a lot of the 
YouTube stuff but would like a step up from there.
Hopefully I'll join you again one day ;)
Thanks in advance.
Ross

On 28 Dec 2013, at 09:01 PM, Kevin kevinsisco61...@gmail.com wrote:


Hello list.  What is the best key stretching method that can be used?

--
Kevin

___
cryptography mailing list
cryptography@randombit.net
http://lists.randombit.net/mailman/listinfo/cryptography
Please don't highjack topics.  It really tends to give a bad 
impression.  We are all happy to help but you can start your own thread.



--
Kevin

___
cryptography mailing list
cryptography@randombit.net
http://lists.randombit.net/mailman/listinfo/cryptography


[cryptography] beginner crypto

2013-12-28 Thread ianG

On 29/12/13 02:35 AM, RossMcFarlane wrote:

Hi everyone, I don't want to waste your time but I'd love to learn some more 
about cryptography, I was recommended this mailing list but its aimed well 
above my standard.



Yes, this is about crotchety old war armchair cryptographers fighting 
decades-old battles.  So etiquette helps, but which one is a secret.




I'm based in the UK 17 years old and to be pointed in the direction of some 
good resources would be great, I've watched a lot of the YouTube stuff but 
would like a step up from there.



Question 1; are you interested in maths or in programming?  Your 
survival probability increases if it is only one.


If in programming, what language?  What you probably would fine easiest 
would be to read the wikipedia pages on block ciphers.  Then search for 
an algorithm and try and get it going.


There was once an algorithm called Tiny which was quite nice.

If in maths, others can comment.

iang



Hopefully I'll join you again one day ;)
Thanks in advance.
Ross


___
cryptography mailing list
cryptography@randombit.net
http://lists.randombit.net/mailman/listinfo/cryptography