From b7b80b303d2a64134279be3955c76ed3fa3b0fad Mon Sep 17 00:00:00 2001 From: ja Date: Fri, 17 Dec 2021 14:16:08 +0100 Subject: [PATCH] =?UTF-8?q?=C3=A4nderungen=20hash=20algorithmus?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- App_Code/TestPerformance.vb | 6 +++--- App_Code/VERAG_VARIABLES.vb | 11 +++-------- Berechnung Memorysize argon2.xlsx | Bin 9007 -> 9079 bytes Customers/Default2.aspx.vb | 3 +-- 4 files changed, 7 insertions(+), 13 deletions(-) diff --git a/App_Code/TestPerformance.vb b/App_Code/TestPerformance.vb index 5aaf492..44ae28d 100644 --- a/App_Code/TestPerformance.vb +++ b/App_Code/TestPerformance.vb @@ -129,14 +129,14 @@ Public Class TestPerformance Dim finalhash As Byte() For zahl As Integer = 0 To zahlint sw1.Start() - arrkeys.Add(VERAG_VARIABLES.GenerateSalt(VERAG_VARIABLES.RandomInteger(0, zahlint))) + arrkeys.Add(VERAG_VARIABLES.GenerateSalt(VERAG_VARIABLES.RandomInteger(Math.Pow(2, 4), Math.Pow(2, 7)))) arrzahl_iterats.Add(VERAG_VARIABLES.getiterationnumber) - arrzahl.Add(zahlint) + arrzahl.Add(VERAG_VARIABLES.RandomInteger(Math.Pow(2, 8), Math.Pow(2, 7))) sw1.Stop() arrzeitp1.Add(sw1.ElapsedMilliseconds) sw1.Reset() Next - Dim pw As String = "q~^Vd$fS§§nS4!q" + Dim pw As String = "qVd$fS§564nS4" For zahl As Integer = 0 To zahlint sw2.Start() hashbytes.Add(VERAG_VARIABLES.HashPassword(pw, arrkeys(zahl), arrzahl_iterats(zahl), arrzahl(zahl))) diff --git a/App_Code/VERAG_VARIABLES.vb b/App_Code/VERAG_VARIABLES.vb index 12d8950..cdd8fb1 100644 --- a/App_Code/VERAG_VARIABLES.vb +++ b/App_Code/VERAG_VARIABLES.vb @@ -35,20 +35,15 @@ Public Class VERAG_VARIABLES Argon.Salt = salt Argon.DegreeOfParallelism = 24 Argon.Iterations = nIterations - Argon.MemorySize = (((nIterations * 1 - (nIterations * 1.23) / 4 * 2) / 1.05) + 1 * 270) + Argon.MemorySize = (((nIterations * 1.18 - (nIterations * 1.23) / 4 * 2) / 1.05) + 1 * 270) - 'Return Convert.ToBase64String(Argon.GetBytes(nHash)) - 'Return Argon.GetBytes(nHash) - 'Dim saltBytes = Convert.FromBase64String(salt) - 'Using rfc2898DeriveBytes = New Rfc2898DeriveBytes(password, saltBytes, nIterations) - 'End Using Return Argon.GetBytes(nHash) Else Dim Argon As Argon2d = New Argon2d(Encoding.UTF8.GetBytes(VERAG_PROG_ALLGEMEIN.cCryptography3.Encrypt(password))) Argon.Salt = salt - Argon.DegreeOfParallelism = 48 + Argon.DegreeOfParallelism = 36 Argon.Iterations = nIterations * 2 - Argon.MemorySize = (((nIterations * 1.385 - (nIterations * 0.72) / 1.95 * 2.28) / 0.08) + 1 * 316) + Argon.MemorySize = (((nIterations * 1.385 - (nIterations * 0.56) / 1.95 * 2.28) / 5.18) + 1.024 * 316) Return Argon.GetBytes(nHash) End If diff --git a/Berechnung Memorysize argon2.xlsx b/Berechnung Memorysize argon2.xlsx index 51b18176917b001a69917cd58564e90d24d3e4f4..7da5e2988683cb9fa1dbd66435dcebe854d57fc2 100644 GIT binary patch delta 2395 zcmY+Gc{CJ?7stm;mJu^!8H1ULu_UrDSrdLj6N7o#OJOREHQOMDu|<~AWFj)MwGc6~ zHU>|bkvt+M+ml@$X;Gy3)jPlQd*|JA?m73|@BQm8pL6SNzS=xSg8BQ1g(y*)JQz*J z&1=IF&IjycKE_|WLqrajdn1&h(|ACw0%~z<&TFN?35bT(_ubr)>a*W^dR!lb&Z8Jb z#`7hm!PlqaF5ttRzrc*UIldPa@ZNQCE0>NvG3DTI(^X%d&5&bG1e%yIP$06rjdGQcCJ83mTOlMH~lVS~i_ze0WhHrbMa^$AG5%I!FmCYBIIE zy0DK3%Emg*0j&a0W1Q#vgnAt(rJQ0zdmp~7MG@S`t|YG_EG&(^{i zuvbA!!VA=mwQZoT<<#5rFt@|-mF zuJ#=vecldy8bE(fdZ-8URLSa^pPn$DuMue#f3@Y{VmBW4?(V${D{}#`?PerIpg9i| z1nnRYB+POY5;=Inn zAv3<|;<`6HW#0O2bWn{}K}Z}GB}nP*OA(4mKsr9{`eJ%+d}F(mnD@QG6kN_F>5ABg z3>aeeoulEnqEJP&1V_Cz{OHrhE6Bw0VlQn*JOcJeDFMu^$+K+{^u0YOn20;NU<0lAfzs>@ppHP3eL$C~MN zM&Pw-Q3pjIzmIdW>$J~b;@fCh+c=Q*YBcoqZn$QRVgK@x9xU;Jh=f92GNWI)SFMRvTVBhr zjbP!o;!@cO=RWIZ*Gg<*Z?@AFzsqZMqS*<0Q^bf+L%hiWp(p6KIT0_DV8x*X<)AX8 z2l;pVyAH}Ik(al5&+Qrl5iZI;K7~~5ec2cxPy{$#Q@G$o+h9vU?KweTf+}jW1^JpM z;aPAV=mw5p2gkM5$tJl!#J6QgNmi)IO+6w8_co@sL-nPMO{BMVwr%g}Kic=G#xB}; zoofY9PxbA@?j*cYQ8=M^ynbInT2?|ahTLzsDVD{`6<@rp{zXWNC9ZCqva_z6^2jr1 zvp(S1I-8+I%EL)DA^ObTIjCHn@q3%fUcPSBFU1WtJ5(nb$#YA~R<|Kp3F@VDNxXN< z9XH~4du?#)Yz}@2X9da1zqO2Ci6^Ef=BMA2c=QeC44E3p3ZGqcYIPgDu%&(Lm>?HekQB~P z8COo~LAvxaj#EpFA{R{Up95txz}6L4iFfL7ZMiiaQA78m(O19PYU*>0@@VP_;mWJx zEiQv;67zS5;}5(82{eoCsgp;N-}A2bCO72WvCtm%_3?_C53`GY?6wmgg7wmJSp9Ra z=qqBrrlv;qq~W#lLnfYl*XzVAbx1{qvxnx!SJ0_RilX%ym7B5U*Z5auXn=LSnEQLa z8^4WxEPPeGA~c}t?syvT0R5m`hGpqYy*M?p1(L0_$d#9RJn$(cPcGeyFHI{9VzqQI z)BnmGnpr7Vsp^;uUEY@*K2=AwQ5^eNp-pu0I@4bcx6jI7m4pjiFr6mJRC&l|+`Jdg zju+3SPbA~^^xBdq-K^gC0NTC$*Kr`NZ=Vv(_dvhSlfTG2f{JI_$m;WvpFyoAbxs_< z1{&T;j={u^^G`M@6-{@^g-(P#(dE~oMa-xyKUFFU>hIYF1QV+8))ZK58A-Xa|F_Rg zg*(d}J-TXl7S=MW`NEKrsX3P95L@-u+s(lLXg4XhQe-hI%XMr_((iXSCtV4nj4N}E zuaub^_an~g?G0Y(a+WS7&xxx`4Cqb)f5gd`qw$-39`#Yfd9ko+qD+{;&2eit>%u@ z&PKET%9U@GzHM)pD(ubCURkehIm{cDaV*z_9Sy5eS5bXqlAT`MB>#G$^ooAfgxP6t z-P@UH-%QKs;CN~SBx&OjNBB7;wO-C5HLqXJyq?7G2M)d(59jQQ{t);zWZIengjtEs z1pV(z(Zv`c|BvOLXqNox|ClW;4PyyJh|*x9aN0CRjgL+fQjkae!$kl<`k(5b(Io`! zJVKV{tpG#*y-j=oK>SaDiv6o7mX@iYg!;QdKl3ksI_zIM5KZGMnDGtK1QZnoD&&7@ F{{<<{I&S~~ delta 2315 zcmY+Gdo&Y_8^^a;F;j%dn&vJ^6DrwTTe;-Al4O`zF1bc!L|Rks!)%pG5}M0MXox1) zxx|e0&OLJ1TynpbSMT|qU*~90z?yB6*DAWPXJ{j6ZNvYE-vJv2I>b246h1 z-^_q#lgA4YYcge!KB@<01T)n)gd7YPsa!~PilkhT@2W_sZlEBIi-`8VH&^RScc!{X zA)P^7Cqd%=xckggZ|cNYnDjMFpM%b6hdC;4n(oz}xn_8nma`YDeEAfo%xz6593f@D z?1?VnFh`YbaY&(Ejr-3ut(n{D*|(Q`k%o`R$*C&}DRiFDN6XNxw6T{sZt1*NwZ@en z8D+aeY=kbn4`}_xBsv^Z(`b`k1s~zy%dOq5rELy3i$7<_nt^7Hs@%nCmrdlJJ#x=4 zv`N|_A%t@a;_0G3?asDNjxt>~=yaG9V z2XFm^8Aozy|GX|Y0C*M}As@uLs_%9e2e@)pfomOpTQp0&d?iaWXeMNk?}88MYFO4$ z&`ut_BNH4%JZ)C-dU%Kh@957)G5BxFbHhZ+U0j=l9KMcyoZdm!*q?l9#Kf{(aQUbk zvjw%1$v8`xDC(knH-Sa0@2VAN#Qnffyi9| z06?NSLZC!QGa6ij5JR+%Y+V5vf9lmhiAym^G>+&yQ6IG?Z4PMLR!?~wlcho*qr|S{X#h1`?k4OWgGiqE-KfTCfh+jYRbvbLiBvE0ije<#>OWT8l(K$X)ni#`y%S=8Y|{O#JdKCNhawg zTzo>oM0kPoo`q)Ddi}?kIj&)eOa(5V3QT!B0gtC$FLUEJa?)F?2;i{B{ zfj9CfiEK&kWKcEYnMKd9wak&~(}jt{d~VUB8j~or*8FrCZ@m@60$mX@=(YS|p!uSw z8H#;!X)|6ljZI{tS)xSw^9P4>LSsrj?bkEVUcRGonw7bIKJsebDGvMYUMa_{|8Qh* zc%&1gFQK#Kg$+7$$Mb!4f*N!F4>f_{t!%4;4X38V_qm~%kmPst1+MjN(uU)Mq)`#D}H}j$RSz!+t;{e*4Lu8XCe|wo9d7 zzb}_}-!Lial?SwEzG$CpZG?sO=JpV2FVqF;1eJ_Q_7qA%TUwad;R}mvuB@E*4 z$?2D*#OzxH8={{mJLVr`g0Tow*8BUejtCKa5FzXk^rc`!yISJ}rI2hS@7m6i^uR6LO1H7AOS2^T(XvHEJd)zT2o zfDiPxo|K&*=E^dqoRG#=D$W5BJRVQDKH?49O5$YX%^}8Ts$Jk0Q2wEiEYP4Dgi9imlcihTkzprVb)>m^$@a-7m zctWzWF5%n0%Dq)b2}DsCwBHPOs_>WI;LF(Oi|pN>%R zo;S9tHDEM*bmTOrGWwy?oQnYxFfVy9G-;EDf=GcXr=}y)Xi~5v#7w#rk|YOzJ)lC_ ze6$G<4#}`RA+X>klR2GQ9lJ|~kSIBoD=SEire$EOr-Qp;Xg{8g$3bB!7A0-AB$;>p zMyrkfURRPWiE~HKq^Ta?=D-H!D6KpVYh`C*=cyMk-r~1@6y@+AKwJUkyr|bs-l+HU zz=vDeo8O$-hh@NK!@Y-5zi!;V0r)-QcVA&i0{?q2g5^&_{}0q{s7h}8A2XtH