Comments on: MySQL password security http://mituzas.lt/2009/03/08/mysql-password-security/ Fri, 30 Jul 2010 21:52:54 +0000 hourly 1 http://wordpress.org/?v=3.1-alpha By: tobe http://mituzas.lt/2009/03/08/mysql-password-security/comment-page-1/#comment-188935 tobe Mon, 09 Mar 2009 21:58:28 +0000 http://dammit.lt/?p=383#comment-188935 Anyway, thermal cryptanalysis can be involved against any cryptosystem. Take a hot iron and apply it on the DBA untill THE password is recovered. P.S. Congratulations. P.P.S The devil hides in detail (a.k.a key exchange). Hopefully not this time. Anyway, thermal cryptanalysis can be involved against any cryptosystem. Take a hot iron and apply it on the DBA untill THE password is recovered.

P.S. Congratulations.

P.P.S The devil hides in detail (a.k.a key exchange). Hopefully not this time.

]]> By: Domas Mituzas http://mituzas.lt/2009/03/08/mysql-password-security/comment-page-1/#comment-188930 Domas Mituzas Mon, 09 Mar 2009 07:55:33 +0000 http://dammit.lt/?p=383#comment-188930 Arjen, the very original design cover both, but not at the same time. Did you suggest asymmetric encryption? That is the only way to pass a token over internet without tradeoffs of usual challenge-response schemes. Of course, there is also Diffie-Hellman style key exchange, but it is quite an overhead for unencrypted fast connection... Arjen, the very original design cover both, but not at the same time.
Did you suggest asymmetric encryption? That is the only way to pass a token over internet without tradeoffs of usual challenge-response schemes.

Of course, there is also Diffie-Hellman style key exchange, but it is quite an overhead for unencrypted fast connection…

]]> By: Arjen Lentz http://mituzas.lt/2009/03/08/mysql-password-security/comment-page-1/#comment-188927 Arjen Lentz Sun, 08 Mar 2009 23:39:37 +0000 http://dammit.lt/?p=383#comment-188927 The original design for the 4.1 scheme (by serg and I) did have both covered, but the implementation got completely borked. The original design for the 4.1 scheme (by serg and I) did have both covered, but the implementation got completely borked.

]]> By: Suzanne Axtell http://mituzas.lt/2009/03/08/mysql-password-security/comment-page-1/#comment-188926 Suzanne Axtell Sun, 08 Mar 2009 21:11:02 +0000 http://dammit.lt/?p=383#comment-188926 Thanks, Domas, that is a *great* shameless plug! :) Thanks, Domas, that is a *great* shameless plug! :)

]]>