I-D Action: draft-kistel-encrypted-password-storage-00.txt

internet-drafts@ietf.org Sun, 08 December 2013 15:26 UTC

Return-Path: <internet-drafts@ietf.org>
X-Original-To: i-d-announce@ietfa.amsl.com
Delivered-To: i-d-announce@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com []) by ietfa.amsl.com (Postfix) with ESMTP id 664621ADFA8 for <i-d-announce@ietfa.amsl.com>; Sun, 8 Dec 2013 07:26:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham
Received: from mail.ietf.org ([]) by localhost (ietfa.amsl.com []) (amavisd-new, port 10024) with ESMTP id vDX-pWGOxEzV for <i-d-announce@ietfa.amsl.com>; Sun, 8 Dec 2013 07:26:32 -0800 (PST)
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 1958A1ADFA1 for <i-d-announce@ietf.org>; Sun, 8 Dec 2013 07:26:32 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
Subject: I-D Action: draft-kistel-encrypted-password-storage-00.txt
X-Test-IDTracker: no
X-IETF-IDTracker: 4.83.p1
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <20131208152631.31362.4536.idtracker@ietfa.amsl.com>
Date: Sun, 08 Dec 2013 07:26:31 -0800
X-BeenThere: i-d-announce@ietf.org
X-Mailman-Version: 2.1.15
Reply-To: internet-drafts@ietf.org
List-Id: Internet Draft Announcements only <i-d-announce.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/i-d-announce>, <mailto:i-d-announce-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/i-d-announce/>
List-Post: <mailto:i-d-announce@ietf.org>
List-Help: <mailto:i-d-announce-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/i-d-announce>, <mailto:i-d-announce-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 08 Dec 2013 15:26:33 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.

	Title           : Password Storage Using Public Key Encryption
	Author(s)       : Robert Kisteleki
	Filename        : draft-kistel-encrypted-password-storage-00.txt
	Pages           : 5
	Date            : 2013-12-08

   Current password storage methods predominantly use cryptographic hash
   functions in order to avoid storing users' passwords in clear text.
   Unfortunately, recent advancements in hardware design (notably GPUs)
   allow an attacker to try millions or even billions of password
   guesses per second which makes "decryption" of simple passwords
   feasible in short amounts of time.

   This document describes a password storage scheme that incorporates
   public key encryption in order to slow down password verification.
   Since public key algorithms are several orders of magnitude slower
   than hash functions, the result makes it much harder for an attacker
   to discover users' passwords from the stored, encrypted format.

The IETF datatracker status page for this draft is:

There's also a htmlized version available at:

Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at: