Data Pools and Blind Hashing
Date: December 2012
Publication: Passwords^12 (Passwords12)
Source: Currently no known Internet copy of paper.
Abstract or Summary:
This talk discusses an alternative approach to storing password hashes, dubbed Blind Hashing, where all hashed user passwords are not visibly linked to specific user records and are stored in an extremely large database alongside random data. Discussion focuses on the strengths and weaknesses of different variations of this approach and how these evolved the approach to be an attack resistant service at Taplink.
PasswordResearch.com Note: Video of presentation: https://www.youtube.com/watch?v=2i7l8MiLGEg
Do you have additional information to contribute regarding this research paper? If so, please email firstname.lastname@example.org with the details.