Individually Salt IP-Hashes #185

Closed
opened 2025-10-11 08:04:39 -04:00 by rainbownapkin · 1 comment

IP's are currently salted by a server-wide salt.

This will prevent pre-made rainbow tables from being applied, but could be easily re-calculated if either the config file is leaked or from an attacker cracking the salt of a single IP, and applying it systematically to the rest.

Hash format (10-digit salt):(hash)

IP's are currently salted by a server-wide salt. This will prevent pre-made rainbow tables from being applied, but could be easily re-calculated if either the config file is leaked or from an attacker cracking the salt of a single IP, and applying it systematically to the rest. Hash format (10-digit salt):(hash)
rainbownapkin added this to the Canopy v0.4-Indev milestone 2025-10-11 08:04:39 -04:00
rainbownapkin added the
Security Improvement
label 2025-10-11 08:04:39 -04:00
rainbownapkin changed title from Salt IP-Hashes to Individually Salt IP-Hashes 2025-10-11 08:04:49 -04:00
rainbownapkin added a new dependency 2025-10-11 08:08:11 -04:00
rainbownapkin added a new dependency 2025-10-11 09:45:05 -04:00
rainbownapkin removed a dependency 2025-10-11 09:45:10 -04:00
Author
Owner

User IP Hashes are now salted with 24 bits from a cryptographically secure random generation function formatted as a base64 string for extra privacy/security: ade2a4210d

User IP Hashes are now salted with 24 bits from a cryptographically secure random generation function formatted as a base64 string for extra privacy/security: ade2a4210d
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Blocks
#164 Tweaks and Fixes
rainbownapkin/canopy
Reference: rainbownapkin/canopy#185
No description provided.