Security Analysis of salt||password Hashes

Protection of passwords used to authenticate computer systems and networks is one of the most important application of cryptographic hash functions. Due to the application of precomputed memory look up attacks such as birthday and dictionary attacks on the hash values of passwords to find passwords, it is usually recommended to apply hash function to the combination of both the salt and password, denoted salt||password, to prevent these attacks. In this paper, we present the first security analysis of salt||password hashing application. We show that when hash functions based on the compression functions with easily found fixed points are used to compute the salt||password hashes, these hashes are susceptible to precomputed offline birthday attacks. For example, this attack is applicable to the salt||password hashes computed using the standard hash functions such as MD5, SHA-1, SHA-256 and SHA-512 that are based on the popular Davies-Meyer compression function. This attack exposes a subtle property of this application that although the provision of salt prevents an attacker from finding passwords, salts prefixed to the passwords do not prevent an attacker from doing a precomputed birthday attack to forge an unknown password. In this forgery attack, we demonstrate the possibility of building multiple passwords for an unknown password for the same hash value and salt. Interestingly, password||salt (i.e. salts suffixed to the passwords) hashes computed using Davies-Meyer hash functions are not susceptible to this attack, showing the first security gap between the prefix-salt and suffix-salt methods of hashing passwords.

Grøstl

The Grøstl Hash Function Grøstl is FAST Grøstl is PROVABLY SECURE Grøstl is SIDE-CHANNEL RESISTANT Grøstl is SIMPLE

Grøstl Addendum

This document is an addendum to the submission document of Grøstl, which was selected for the second round of NIST's SHA-3 competition. We stress that we do not change the specification of Grøstl. In other words, Grøstl is defined exactly as specified in the original submission document. In this document we mention a few alternative descriptions of our SHA-3 candidate Grøstl and describe recent analysis results on Grøstl.

Intermediate Status Report

This report was produced in partial fulfillment of contract ICT-2007-216676 (ECRYPT II), sponsored by the European Commission through the ICT Programme. The information in this paper is provided as is, and no warranty is given or implied that the information is fit for any particular purpose. The user thereof uses the information at its sole risk and liability. We present a short overview of the recent results on the five finalists for NIST's SHA-3 competition. The next five chapters treat each one of the finalists.

DS-VBF : dual sink vector-based routing protocol for underwater wireless sensor network

Underwater wireless sensor networks (UWSNs) have become the seat of researchers' attention recently due to their proficiency to explore underwater areas and design different applications for marine discovery and oceanic surveillance. One of the main objectives of each deployed underwater network is discovering the optimized path over sensor nodes to transmit the monitored data to onshore station. The process of transmitting data consumes energy of each node, while energy is limited in UWSNs. So energy efficiency is a challenge in underwater wireless sensor network. Dual sinks vector based forwarding (DS-VBF) takes both residual energy and location information into consideration as priority factors to discover an optimized routing path to save energy in underwater networks. The modified routing protocol employs dual sinks on the water surface which improves network lifetime. According to deployment of dual sinks, packet delivery ratio and the average end to end delay are enhanced. Based on our simulation results in comparison with VBF, average end to end delay reduced more than 80%, remaining energy increased 10%, and the increment of packet reception ratio was about 70%.

Rotational cryptanalysis of round-reduced Keccak

In this paper we attack round-reduced Keccak hash function with a technique called rotational cryptanalysis. We focus on Keccak variants proposed as SHA-3 candidates in the NIST’s contest for a new standard of cryptographic hash function. Our main result is a preimage attack on 4-round Keccak and a 5-round distinguisher on Keccak-f[1600] permutation — the main building block of Keccak hash function.

David Clutterbuck, mentoring and coaching - A commentary

Simon Jenkins, in his stimulus piece on David Clutterbuck amply demonstrates just how prolific Clutterbuck has been over a working lifetime. Generally accepted as the person who introduced supported mentoring into Europe, Clutterbuck has written widely on matters that relate to relationships, processes, evidence (and its capacity or otherwise to influence practice), procedures, complexity, management, supervision, guidance (of one kind or another); the list goes on. It is an impressive vita indeed and yet, Clutterbuck’s influence on the world of sports and more specifically, sports coaching; remains relatively modest. Of course this is the purpose of Jenkins’ piece, to stimulate our thought processes such that our attention can be drawn to the possible impact Clutterbuck might have in sport, sports coaching, and athlete and coach mentoring. If nothing else, this is an admirable challenge that Jenkins has set himself.

Reflections on a novel coach education program: A narrative analysis

This paper reports on a collaborative research project between the Faculty of Health Sciences at the University of Ottawa, Triathlon Canada, and the Coaching Association of Canada (CAC). It was designed around a lifelong learner perspective and the Organization for Economic Cooperation and Development’s (OECD) qualifications system. In this paper, we first review the coach learning literature as it pertains to the CAC. We then highlight the background and perspective of a high performance director’s experience in designing and attempting to implement a novel coach education training program. In doing so we uncover the frustrations and tensions in trying to balance innovation with prescribed process and policy. We conclude by making suggestions for further research specifically focused on the background of the key agents involved with the design, implementation and administration of coach education training programs in the competition-development context of the NCCP.

Reflections from damaged modernity

The cliché about modern architecture being the fairy-tale fulfillment of every fantasy ceases to be a cliché only when it is accompanied by the fairy tale’s moral: that the fulfillment of the wishes rarely engenders goodness in the one doing the wishing (Adorno). Wishing for the right things in architecture and the city is the most difficult art of all: since the grim childhood-tales of the twentieth century we have been weaned from dreams and utopias, the stuff of modernism’s bad conscience. For Adorno writing in 1953, Hollywood cinema was a medium of “regression” based on infantile wish fulfillment manufactured by the industrial repetition (mimesis) of the filmic image that he called a modern “hieroglyphics,” like the archaic language of pictures in Ancient Egypt which guaranteed immortality after death in Egyptian burial rites. Arguably, today the iconic architecture industry is the executor of archaic images of modernity linked to rituals of death, promises of omnipotence and immortality. As I will argue in this symposium, such buildings are not a reflection of external ‘reality,’ but regression to an internal architectural polemic that secretly carries out the rituals of modernism’s death and seeks to make good on the liabilities of architectural history.

Fine-mapping of the HNF1B multicancer locus identifies candidate variants that mediate endometrial cancer risk

Common variants in the hepatocyte nuclear factor 1 homeobox B (HNF1B) gene are associated with the risk of Type II diabetes and multiple cancers. Evidence to date indicates that cancer risk may be mediated via genetic or epigenetic effects on HNF1B gene expression. We previously found single-nucleotide polymorphisms (SNPs) at the HNF1B locus to be associated with endometrial cancer, and now report extensive fine-mapping and in silico and laboratory analyses of this locus. Analysis of 1184 genotyped and imputed SNPs in 6608 Caucasian cases and 37 925 controls, and 895 Asian cases and 1968 controls, revealed the best signal of association for SNP rs11263763 (P = 8.4 × 10−14, odds ratio = 0.86, 95% confidence interval = 0.82–0.89), located within HNF1B intron 1. Haplotype analysis and conditional analyses provide no evidence of further independent endometrial cancer risk variants at this locus. SNP rs11263763 genotype was associated with HNF1B mRNA expression but not with HNF1B methylation in endometrial tumor samples from The Cancer Genome Atlas. Genetic analyses prioritized rs11263763 and four other SNPs in high-to-moderate linkage disequilibrium as the most likely causal SNPs. Three of these SNPs map to the extended HNF1B promoter based on chromatin marks extending from the minimal promoter region. Reporter assays demonstrated that this extended region reduces activity in combination with the minimal HNF1B promoter, and that the minor alleles of rs11263763 or rs8064454 are associated with decreased HNF1B promoter activity. Our findings provide evidence for a single signal associated with endometrial cancer risk at the HNF1B locus, and that risk is likely mediated via altered HNF1B gene expression.

Changes in mood, depression and suicidal ideation after commencing pregabalin for neuropathic pain

Background Pregabalin is a treatment option for patients with persistent neuropathic pain. Its use has been associated with changes in mood and the development of depression and/or suicidal ideation. Objective Case presentations were reviewed of five patients reporting changes in mood, depression and suicidal ideation from the first 50 (approximately) patients commenced on pregabalin at the clinic. Discussion Although these patients had a history of depression, their mood had been stable before commencing pregabalin. Soon after commencement they reported changes in mood, and development of depression and/or suicidal ideation, which improved with dose reduction or cessation of pregabalin. Ultimately, all five patients ceased pregabalin treatment. Suicidal ideation is a recog-nised adverse effect of pregabalin. Patients should be warned of and monitored for deterioration in mood.

Formation of highly conductive composite coatings and their applications to broadband antennas and mechanical transducers

Tight networks of interwoven carbon nanotube bundles are formed in our highly conductive composite. The composite possesses propertiessuggesting a two-dimensional percolative network rather than other reported dispersions displaying three-dimensional networks. Binding nanotubes into large but tight bundles dramatically alters the morphology and electronic transport dynamics of the composite. This enables itto carry higher levels of charge in the macroscale leading to conductivities as high as 1600 S/cm. We now discuss in further detail, the electronic and physical properties of the nanotube composites through Raman spectroscopy and transmission electron microscopy analysis. When controlled and usedappropriately, the interesting properties of these composites reveal their potential for practical device applications. For instance, we used this composite to fabricate coatings, whic improve the properties of an electromagnetic antenna/amplifier transducer. The resulting transducer possesses a broadband range up to GHz frequencies. A strain gauge transducer was also fabricated using changes in conductivity to monitor structural deformations in the composite coatings.

Are dietetics educators' attitudes to assessment a barrier to expanding placement opportunities? Results of a Delphi study

Aim Assessment of entry-level health professionals is complex, especially in the work-based setting, placing additional pressures on these learning environments. The present study aims to gain understanding and ideally consensus regarding the setting for assessment of all elements of competence for entry-level dietitians across Australia. Methods Seventy-five experienced academic and practitioner assessors were invited to participate in an online Delphi survey. The 166 entry-level performance criteria of the competency standards for dietitians formed the basis of the questions in the survey, with rating on which ones could be assessed in the practice setting, those which could be assessed in a classroom/university setting and which could be assessed in either setting. Forty-three of 75 invited assessors responded to the first round of the Delphi. A second modified survey was sent to the 43 participants with 34 responding. Results Consensus was achieved for the assessment setting for 86 (52%) of the performance criteria after two rounds of surveying. The majority of these performance criteria achieved consensus at round one (n = 44) and were deemed to be best assessed in the practice setting (n = 55). This study highlighted the perspectives of assessors and their preference for the work-based setting for assessment. Conclusions To reduce the focus on work-based settings as the only place for competence-based assessment of health professionals, there is a need to support individual and organisational change through challenging existing norms around assessment.

Current practice in nutrition diagnosis and intervention for the management of Parkinson's disease in Australia and Canada

Aim To document current practice by dietitians in Australia and Canada in the nutrition management of Parkinson's disease. This will help identify priority areas for review and development of practice guidelines and direct future research. Methods Current practice in the phases of the Nutrition Care Plan was captured using an online survey distributed to Dietitians Association of Australia members and Practice-Based Evidence in Nutrition subscribers through their email newsletters. The results of the diagnosis, intervention and monitoring phases are presented here. Results Eighty-four dietitians responded. There was consistency in practice for nutrition issues that are encountered in other populations, such as malnutrition and constipation. There was more variation in practice in the nutrition issues that are more specific to Parkinson's disease, such as nutrition and meal interactions with medication. A lack of awareness of emerging treatments, such as deep brain stimulation surgery, appears to exist in the responding dietitians. Conclusions The variation in practice that was present for the nutrition issues specific to Parkinson's disease may reflect the lack of quality evidence and subsequently evidence-based guidelines in these areas. Work to provide background information about treatment options and to translate current evidence for the nutrition issues that are specific to Parkinson's disease into practice recommendations should be completed.

‘Blind Faith’. An experiment with narrative agency in game design

This paper reports on the current field of narrative-based game design through case study analysis with a particular focus on balancing high narrative agency with low production resources.