Re: Key fingerprints (not the DNS kind)

[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

 



On Nov 9, 2014 8:42 PM, "Damien Miller" <djm@xxxxxxxxxxx> wrote:
>
> On Sun, 9 Nov 2014, shawn wilson wrote:
>
> > On Sun, Nov 9, 2014 at 7:11 PM, Damien Miller <djm@xxxxxxxxxxx> wrote:
> >
> > That's always a good idea, but try not to reinvent the wheel too much
> > here: http://hashcat.net/wiki/doku.php?id=example_hashes
> > There's no m5(sha512(word)) but $foo$fpr or $foo$host$fpr should maybe
> > be used?
>
> I don't think password hashes are a good model for key fingerprints.
> Password hashes are intended for consumption in password databases,
> key fingerprints are intended for rapid and accurate comparison by
> humans.
>

It is to identify a hash. Who cares what the hash is of. I was pointing out
prior design that'd be good to use here.

> BTW I think md5(inner_hash(x)) is a terrible idea :)

I don't see a benefit to doing this but also no harm.
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@xxxxxxxxxxx
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev




[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux