Stronger Password-Based Encryption Using I/O Hardness - Greg Zaverucha BSides Las Vegas 2015 (Hacking Illustrated Series InfoSec Tutorial Videos)
Stronger Password-Based Encryption Using I/O Hardness
Greg Zaverucha

Password-based encryption needs all the help it can get to withstand brute-force attacks. We repurpose an old idea to encrypt data so that each password guess requires processing all of the encrypted data. Then, we'll look at some use cases to see how the costs change for the attacker and defender. In a brute force attack, this can mean a large increase in attacker I/O, with little cost increase to defenders, who must process all of the data anyway.

Back to Las Vegas 2015 video list



If you would like to republish one of the articles from this site on your webpage or print journal please contact IronGeek.

Copyright 2020, IronGeek