Re: Generating AES key by hashing login password?

2008-08-30 Thread Peter Gutmann
Daniel Carosone <[EMAIL PROTECTED]> writes: >On Fri, Aug 29, 2008 at 09:01:26PM +, Muffys Wump wrote: >> Master Password: hash(hash(login_password)) >> >> Would this be a good idea if we've used this generated hash as a key for AES? >> Would the hashing be secure enough against different kinds

Re: Generating AES key by hashing login password?

2008-08-30 Thread Jon Callas
We were wondering if it was possible to use a hash function instead. Using the password he provided at the login screen and hash it n times. Master Password: hash(hash(login_password)) Would this be a good idea if we've used this generated hash as a key for AES? Would the hashing be secur

Re: Generating AES key by hashing login password?

2008-08-29 Thread Daniel Carosone
On Fri, Aug 29, 2008 at 09:01:26PM +, Muffys Wump wrote: > Master Password: hash(hash(login_password)) > > Would this be a good idea if we've used this generated hash as a key for AES? > Would the hashing be secure enough against different kinds of attacks? You want to look at something like

Generating AES key by hashing login password?

2008-08-29 Thread Muffys Wump
Hello, We're two Students and we're developing an online password manager like Clipperz or PassPack. In order to securely authenticate an user he has to submit his login password. But to encrypt his data (mainly credentials for other websites) with AES he would have to submit another password fo