Re: Apache web server 2.2: htpasswd predictable salt weakness
Dear Peter Watkins,
--Thursday, February 14, 2008, 5:55:17 AM, you wrote to
bugtraq@xxxxxxxxxxxxxxxxx:
PW> As a result:
PW> - Salts created by htpasswd are very predictable.
PW> - The universe of salts for htpasswd is far less than the MD5 algorithm
PW> provides for -- 29 bits vs. 48, or 0.000191 percent of the range that
PW> should be used for MD5.
As far as I understand, salt predictability gives nothing to you. Salt
protects against rainbow tables attacks in case stored passwords are
stolen. Salt is stored with password, that is salt is known to attacker.
All you need for salt is to be different for different passwords and for
different systems. That is 175, 176, 177 etc are pretty good salts for
sequentially generated passwords in case 175 is apriory unknown.
Salt universe is more important, but 29 bits against 48 is not something
scaring.
May be I am missing something?
--
~/ZARAZA http://securityvulns.com/