Individually Salt IP-Hashes #185
Labels
No labels
Bug
Cleanup/Refactor
Core Feature
Documentation
Feature
Performance Improvement
Security Improvement
UX/Accessibility
Unreproducable Bug
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Blocks
#164 Tweaks and Fixes
rainbownapkin/canopy
Reference: rainbownapkin/canopy#185
Loading…
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
IP's are currently salted by a server-wide salt.
This will prevent pre-made rainbow tables from being applied, but could be easily re-calculated if either the config file is leaked or from an attacker cracking the salt of a single IP, and applying it systematically to the rest.
Hash format (10-digit salt):(hash)
Salt IP-Hashesto Individually Salt IP-HashesUser IP Hashes are now salted with 24 bits from a cryptographically secure random generation function formatted as a base64 string for extra privacy/security:
ade2a4210d