What does salt mean in the string-key qualifier (s2k)?

What does "salt" mean in the string-to-key (s2k) specifier?

It seems to be a random number generator to shake things up, but I would like to know what salt means?

For example, it says:

3.6.1.2. Salted S2K

   This includes a "salt" value in the S2K specifier -- some arbitrary
   data -- that gets hashed along with the passphrase string, to help
   prevent dictionary attacks.

       Octet 0:        0x01
       Octet 1:        hash algorithm
       Octets 2-9:     8-octet salt value

   Salted S2K is exactly like Simple S2K, except that the input to the
   hash function(s) consists of the 8 octets of salt from the S2K
   specifier, followed by the passphrase.

But salt is not defined, although its meaning seems clear.

+3
source share
3 answers

From Wikipedia :

In cryptography, a salt contains random bits that are used as one of the inputs for the key derivation function. Another input is a password or passphrase. The derivation of the key derivation function is stored as an encrypted version of the password.

- , . .

+3

.

, . , .

.

+3

, , .

! ( - .)

, : . .

+2

Source: https://habr.com/ru/post/1745691/


All Articles