[38507] in bugtraq
RE: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
daemon@ATHENA.MIT.EDU (Mike Fratto)
Thu Apr 21 16:45:58 2005
From: "Mike Fratto" <mfratto@nwc.com>
To: "'Jim Knoble'" <jmknoble@pobox.com>, <bugtraq@securityfocus.com>
Date: Thu, 21 Apr 2005 15:25:23 -0400
Message-ID: <00ed01c546a7$e067d0f0$021f10ac@bitchin>
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
In-Reply-To: <20050421025834.GP24966@crawfish.ais.com>
> I thought the idea of the salt was to aid in expanding the
> keyspace. Even though the salt is known (in traditional Unix
> passwd/shadow/master.passwd databases,
I am pretty sure the intent the salt is to make pre-computation of a
dictionaries infeasable due to storage requirements. It doesn't really add
to the keyspace because the salt is known and doesn't have to be guessed.
