Re: Salt in encrypted password in pg_shadow - Mailing list pgsql-general

From Tom Lane
Subject Re: Salt in encrypted password in pg_shadow
Date
Msg-id 727.1094703828@sss.pgh.pa.us
Whole thread Raw
In response to Re: Salt in encrypted password in pg_shadow  (Greg Stark <gsstark@mit.edu>)
List pgsql-general
Greg Stark <gsstark@mit.edu> writes:
> This means it's quite possible the NSA had differential cryptanalysis
> 30 years before anyone else.

s/quite possible/known fact/

> Quite a remarkable achievement. However
> it's unlikely that the same situation holds today.

Why would you think that?  The US government may not have too many
clues, but they certainly understand the importance of crypto.  I cannot
think of any reason to suppose that NSA et al would have stopped
spending serious effort in this area.  (Where "serious effort" is
measured by the standard of "a billion here, a billion there, pretty
soon you're talking about real money".)

Quite honestly, as a US taxpayer I would not be happy if the NSA were
not far ahead of public research in this field ...

            regards, tom lane

pgsql-general by date:

Previous
From: the inquirer
Date:
Subject: PL/pgSQL Function Problem
Next
From: groner@puzzle.ch (Marcel Groner)
Date:
Subject: postgresql hanging (blocking) with smp kernel