corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0d0f7-dbcb-704a-9c02-f6cdd203be5f

What We Do in the /etc/shadow – Cryptography with Passwords

some_furry · published 29 December 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at soatok.blog Wayback capture
4blogs citing
First cited
9 Feb 2023
Most recent
17 Mar 2026
Rank this month
not ranked
Links from this post
41
Words captured
4,077

Cited by

Blog
In the post
Date
Jarema's digital garden
My Fedora setup and hardening process Read at the source ↗
17 Mar 2026
samuellucas.com
Deterministic Password Managers Revisited Read at the source ↗
25 Feb 2024
Volution Notes
Learning before dabbling in applied cryptography Read at the source ↗
15 May 2023
rocky.dev
PrivacyProtect: Securely Share Passwords and Store Sensitive Files in Convenient Locations Read at the source ↗
9 Feb 2023

Links from this post

Link
Host
https://twitter.com/SwiftOnSecurity/status/512081783643320320
twitter.com
https://webauthn.guide/
webauthn.guide
https://www.eff.org/
eff.org
https://blog.cryptographyengineering.com/2012/04/05/icloud-who-holds-key/
blog.cryptographyengineering.com
https://github.com/Sc00bz/bscrypt
github.com
https://gist.github.com/Sc00bz/e99e48a6008eef10a59d5ec7b4d87af3
gist.github.com
https://gist.github.com/Sc00bz/a57c07a83f16bb78683425be60a65718
gist.github.com
Understanding HKDF Read at the source ↗
soatok.blog
https://news.ycombinator.com/item?id=22028143
news.ycombinator.com
Programmers Don’t Understand Hash Functions Read at the source ↗
soatok.blog
https://www.password-hashing.net/
password-hashing.net
https://harubaki.carrd.co/
harubaki.carrd.co
https://www.kaggle.com/datasets/wjburns/common-password-list-rockyoutxt
kaggle.com
https://en.wikipedia.org/wiki/Crypt_(C
en.wikipedia.org
https://www.csoonline.com/article/2134124/adobe-confirms-stolen-passwords-were-encrypted-not-hashed.html
csoonline.com
https://linuxize.com/post/etc-shadow-file/
linuxize.com
https://www.trendmicro.com/vinfo/us/security/news/cyber-attacks/2012-linkedin-breach-117-million-emails-and-passwords-stolen-not-6-5m
trendmicro.com
https://www.zdnet.com/article/these-are-the-worst-passwords-from-the-linkedin-hack/
zdnet.com
https://eprint.iacr.org/2016/989
eprint.iacr.org
https://password-hashing.net
password-hashing.net
https://twitter.com/ScruffKerfluff
twitter.com
https://blog.cryptographyengineering.com/should-you-use-srp/
blog.cryptographyengineering.com
https://crypto.stackexchange.com/a/47266
crypto.stackexchange.com
Soatok’s Guide to Side-Channel Attacks Read at the source ↗
soatok.blog
https://tobtu.com/blog/2021/10/srp-is-now-deprecated/
tobtu.com
https://www.ietf.org/proceedings/104/slides/slides-104-cfrg-pake-selection-01.pdf
ietf.org
https://wpa3.mathyvanhoef.com/
wpa3.mathyvanhoef.com
https://github.com/cfrg/pake-selection
github.com
https://twitter.com/SwizzlestixUK
twitter.com
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-209.pdf
nvlpubs.nist.gov
https://news.ycombinator.com/user?id=FreakLegion
news.ycombinator.com
https://pages.nist.gov/800-63-3/sp800-63b.html
pages.nist.gov
Guidance for Choosing an Elliptic Curve Signature Algorithm in 2022 Read at the source ↗
soatok.blog
https://ristretto.group/
ristretto.group
https://www.dashlane.com/download/whitepaper-en.pdf
dashlane.com
https://words.filippo.io/the-scrypt-parameters/
words.filippo.io
https://tobtu.com/minimum-password-settings/
tobtu.com
https://gist.github.com/Chick3nman/32e662a5bb63bc4f51b847bb422222fd
gist.github.com
https://datatracker.ietf.org/doc/draft-irtf-cfrg-opaque/09/
datatracker.ietf.org
https://www.rfc-editor.org/rfc/rfc5054
rfc-editor.org
https://passwordscon.org/about/
passwordscon.org