21 Mar
2008
21 Mar
'08
23:03
Am Freitag, 21. März 2008 14:45:14 schrieb Alberto Passalacqua:
Does it? If we don't offer it, people can do it anyway. But if they do it anyway, we give an attacker a cryptographical advantage by encrypting the same password twice.
You assume that the attacker know we are using the same password.
He might just try an attack on that assumption. Regards Oliver --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org