What does 'salt' refer to in string-to-key (s2k) specifier?

Posted by WilliamKF on Stack Overflow See other posts from Stack Overflow or by WilliamKF
Published on 2010-05-16T21:27:02Z Indexed on 2010/05/16 21:30 UTC
Read the original article Hit count: 298

Filed under:

s2k

|

salt

What does 'salt' refer to in string-to-key (s2k) specifier?

It appears to be a random number generator to shake things up, but I would like to know what 'salt' stands for?

For example it is written:

3.6.1.2. Salted S2K

   This includes a "salt" value in the S2K specifier -- some arbitrary
   data -- that gets hashed along with the passphrase string, to help
   prevent dictionary attacks.

       Octet 0:        0x01
       Octet 1:        hash algorithm
       Octets 2-9:     8-octet salt value

   Salted S2K is exactly like Simple S2K, except that the input to the
   hash function(s) consists of the 8 octets of salt from the S2K
   specifier, followed by the passphrase.

But salt is not defined, although its meaning seems clear.

© Stack Overflow or respective owner

Related posts about s2k

What is an s2k algorithm?

as seen on Stack Overflow - Search for 'Stack Overflow'
What is the definition of an s2k algorithm? For example, "PBKDF2(SHA-1)" is an s2k algorithm. Here is some Botan code that refers to s2k: AutoSeeded_RNG rng; std::auto_ptr<S2K> s2k(get_s2k("PBKDF2(SHA-1)")); s2k->set_iterations(8192); s2k->new_random_salt(rng, 8); SymmetricKey… >>> More
What does 'salt' refer to in string-to-key (s2k) specifier?

as seen on Stack Overflow - Search for 'Stack Overflow'
What does 'salt' refer to in string-to-key (s2k) specifier? It appears to be a random number generator to shake things up, but I would like to know what 'salt' stands for? For example it is written: 3.6.1.2. Salted S2K This includes a "salt" value in the S2K specifier -- some arbitrary data… >>> More
computing matting Laplacian matrix of an Image

as seen on Stack Overflow - Search for 'Stack Overflow'
hi everyone, i need to compute Laplacian Matrix-L for an image(nXn) in opencv...computing goes as follows.......... dij - 1/|wk|{[1+1/(e/|wk|+s2)][(Ii-µk)*(Ij -µk)]}.... for all(i,j)?wk,summing over k yields (i,j)th element of L. where Here dij is the Kronecker delta,µk… >>> More
Null Safe dereferencing in Java like ?. in Groovy using Maybe monad

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm working on a codebase ported from Objective C to Java. There are several usages of method chaining without nullchecks dog.collar().tag().name() I was looking for something similar to safe-dereferencing operator ?. in Groovy instead of having nullchecks dog.collar?.tag?.name This led to Maybe… >>> More

Related posts about salt

Why is a password salt called a "salt"?

as seen on Stack Overflow - Search for 'Stack Overflow'
Is there a significance to the word "salt" for a password salt? >>> More
Salt question - using a "random salt"

as seen on Stack Overflow - Search for 'Stack Overflow'
Hey everyone, Further to my question here, I have another question regarding salts. When someone says "use a random salt" to pre/append to a password, does this mean: Creating a static a 1 time randomly generated string of characters, or Creating a string of characters that changes at random… >>> More
Generating a salt in PHP

as seen on Stack Overflow - Search for 'Stack Overflow'
What's the best way to generate a cryptographically secure 32 bytes salt in PHP, without depending on libraries seldom included in typical PHP installations? After some googling I discovered that mt_rand is not considered secure enough, but I haven't found a suggestion for a replacement. One article… >>> More
Salt, passwords and security

as seen on Stack Overflow - Search for 'Stack Overflow'
I've read through many of the questions on SO about this, but many answers contradict each other or I don't understand. You should always store a password as a hash, never as plain text. But should you store the salt (unique for each user) next to the hashed password+salt in the database. This doesn't… >>> More
salt and rainbow table

as seen on Stack Overflow - Search for 'Stack Overflow'
what is "salt", also what is "rainbow table". >>> More