Re: Variable Key Stretching for v3

On 2/20/06, Rony Shapiro <[email protected]> wrote:
> Hm. Another option might be to not put the number in the database at all,
> and let the aplication test all values after a minimum threshold up to an
> insane maximum. This has the nice property that wrong passphrases would take
> *much* longer to be rejected than for correct passphrases to be accepted.
>
> What say?

Please no -- I don't want a little typo in my key phrase to make the
application lock up for ten minutes or more before I can try again.
--
Philip Newton <[email protected]>


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid3432&bid#0486&dat1642