Hello Martin,
I hope this can help you:
In PKCS12 (V1.0) Appendix B, is described a method for
generating pseudo-random bits for a strong password or
a MAC, and it could be used as a complex Has function.
The input data is:
- An ID Byte
- A salt
- An input password
I have used it for something similar to what you want to
do with the following parameters:
- An non standard ID Byte (not 1, 2 or 3)
- Any of the following salts (depending on the
application):
- The same for all data (random generated
at the setup of the aplication).
- Based and/or extracted from other data
of the same entry in the Data Base.
- A random salt for each entry, random
generated when the data was stored, and
kept in the Data Base as another field
or concatenated to the result of the hash.
- Instead of the input password I use the data I
want to validate.
Claudio Horvilleur.
Martin Szotkowski wrote:
>
> Hi all,
> i have interesting problem:
> + We have some Personal Number (PN).
> + PN is primary key in database (DB) of important data. ("bad customer")
> + must NOT exist way to get PN and data from DB
> + must exist way to find out if PN is in DB
> + of course we must inserting PN and data in DB
>
> - ease solution is to use one way function SHA or else, BUT cont of PN is
> limited it is only 6 digit number, so
> attacker can use hard power to get all PN from DB
> - my friend recommend me to expand number in this way, all digits 0 will be
> random of ('a'-'e'); 1 -> ('f'-'n'), etc. Way for hackers will be harder,
> than in previous idea
>
> - does exist some algorithm for this problem (may be in OpenSSL)?
>
> thanks for all answers
> Martin
>
> (excuse me my English)
>
> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> Development Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
