"Password hashing"

Passwords are hashed everywhere: operating systems, smartphones, web services, disk encryption tools, SSH private keys, etc. Hashing passwords mitigates the impact of a compromised database by forcing attackers to bruteforce passwords. Bruteforce is easier when the hash function is not "salted", fast to evaluate, and easy to implement as multiple parallel instances on GPUs or multi-core systems. However existing solutions are not satisfactory, and the huge majority of systems rely on weak hashes (eg. leaks from Sony, LinkedIn, or more recently Evernote).

After a brief introduction of the problem and previous solution attempts, this talk presents a roadmap towards new improved hashing methods.

Pour en savoir plus: http://www.loria.fr/events/seminaire-securite-loria-le-10-fevrier