Security Analysis of salt||password Hashes

Protection of passwords used to authenticate computer systems and networks is one of the most important application of cryptographic hash functions. Due to the application of precomputed memory look up attacks such as birthday and dictionary attacks on the hash values of passwords to find passwords, it is usually recommended to apply hash function to the combination of both the salt and password, denoted salt||password, to prevent these attacks. In this paper, we present the first security analysis of salt||password hashing application. We show that when hash functions based on the compression functions with easily found fixed points are used to compute the salt||password hashes, these hashes are susceptible to precomputed offline birthday attacks. For example, this attack is applicable to the salt||password hashes computed using the standard hash functions such as MD5, SHA-1, SHA-256 and SHA-512 that are based on the popular Davies-Meyer compression function. This attack exposes a subtle property of this application that although the provision of salt prevents an attacker from finding passwords, salts prefixed to the passwords do not prevent an attacker from doing a precomputed birthday attack to forge an unknown password. In this forgery attack, we demonstrate the possibility of building multiple passwords for an unknown password for the same hash value and salt. Interestingly, password||salt (i.e. salts suffixed to the passwords) hashes computed using Davies-Meyer hash functions are not susceptible to this attack, showing the first security gap between the prefix-salt and suffix-salt methods of hashing passwords.

Grøstl – a SHA-3 candidate

Grøstl is a SHA-3 candidate proposal. Grøstl is an iterated hash function with a compression function built from two fixed, large, distinct permutations. The design of Grøstl is transparent and based on principles very different from those used in the SHA-family. The two permutations are constructed using the wide trail design strategy, which makes it possible to give strong statements about the resistance of Grøstl against large classes of cryptanalytic attacks. Moreover, if these permutations are assumed to be ideal, there is a proof for the security of the hash function. Grøstl is a byte-oriented SP-network which borrows components from the AES. The S-box used is identical to the one used in the block cipher AES and the diffusion layers are constructed in a similar manner to those of the AES. As a consequence there is a very strong confusion and diffusion in Grøstl. Grøstl is a so-called wide-pipe construction where the size of the internal state is significantly larger than the size of the output. This has the effect that all known, generic attacks on the hash function are made much more difficult. Grøstl has good performance on a wide range of platforms and counter-measures against side-channel attacks are well-understood from similar work on the AES.

Grøstl - a SHA-3 candidate

Grøstl is a SHA-3 candidate proposal. Grøstl is an iterated hash function with a compression function built from two �fixed, large, distinct permutations. The design of Grøstl is transparent and based on principles very different from those used in the SHA-family. The two permutations are constructed using the wide trail design strategy, which makes it possible to give strong statements about the resistance of Grøstl against large classes of cryptanalytic attacks. Moreover, if these permutations are assumed to be ideal, there is a proof for the security of the hash function. Grøstl is a byte-oriented SP-network which borrows components from the AES. The S-box used is identical to the one used in the block cipher AES and the diffusion layers are constructed in a similar manner to those of the AES. As a consequence there is a very strong confusion and diffusion in Grøstl

Risk factors for delayed healing in venous leg ulcers : a review of the literature

Background Chronic leg ulcers, remaining unhealed after 4–6 weeks, affect 1-3% of the population, with treatment costly and health service resource intensive. Venous disease contributes to approximately 70% of all chronic leg ulcers and these ulcers are often associated with pain, reduced mobility and a decreased quality of life. Despite evidence-based care, 30% of these ulcers are unlikely to heal within a 24-week period and therefore the recognition and identification of risk factors for delayed healing of venous leg ulcers would be beneficial. Aim To review the available evidence on risk factors for delayed healing of venous leg ulcers. Methods: A review of the literature in regard to risk factors for delayed healing in venous leg ulcers was conducted from January 2000 to December 2013. Evidence was sourced through searches of relevant databases and websites for resources addressing risk factors for delayed healing in venous leg ulcers specifically. Results Twenty-seven studies, of mostly low-level evidence (Level III and IV), identified risk factors associated with delayed healing. Risk factors that were consistently identified included: larger ulcer area, longer ulcer duration, a previous history of ulceration, venous abnormalities and lack of high compression. Additional potential predictors with inconsistent or varying evidence to support their influence on delayed healing of venous leg ulcers included decreased mobility and/or ankle range of movement, poor nutrition and increased age. Discussion Findings from this review indicate that a number of physiological risk factors are asso- ciated with delayed healing in venous leg ulcers and that social and/or psychological risk factors should also be considered and examined further. Conclusion The findings from this review can assist health professionals to identify prognostic indicators or risk factors significantly associated with delayed healing in venous leg ulcers. This will facilitate realistic outcome planning and inform implementation of appropriate early strategies to promote healing.

What’s best for our lymphoedema patients? Have we lost the patient as an individual in the quest for good science?

In a recent issue of the Journal of Lymphoedema, Nickolaidis and Karlsson (2013) indicated that most of the standard treatments for lymphoedema patients were explored and developed early last century, and suggested that holistic assessment of the individual is critical for good outcomes, but that perhaps “less emphasis should be placed on manual lymphatic drainage (MLD) and more on compression, exercise and weight reduction.”

Studies on the failure of unreinforced masonry shear walls

This thesis aims at studying the structural behaviour of high bond strength masonry shear walls by developing a combined interface and surface contact model. The results are further verified by a cost-effective structural level model which was then extensively used for predicting all possible failure modes of high bond strength masonry shear walls. It is concluded that the increase in bond strength of masonry modifies the failure mode from diagonal cracking to base sliding and doesn't proportionally increase the in-plane shear capacity. This can be overcome by increasing pre-compression pressure which causes failure through blocks. A design equation is proposed and high bond strength masonry is recommended for taller buildings and/ or pre-stressed masonry applications.

A statistical model for combustion resonance from a DI diesel engine with applications

Introduced in this paper is a Bayesian model for isolating the resonant frequency from combustion chamber resonance. The model shown in this paper focused on characterising the initial rise in the resonant frequency to investigate the rise of in-cylinder bulk temperature associated with combustion. By resolving the model parameters, it is possible to determine: the start of pre-mixed combustion, the start of diffusion combustion, the initial resonant frequency, the resonant frequency as a function of crank angle, the in-cylinder bulk temperature as a function of crank angle and the trapped mass as a function of crank angle. The Bayesian method allows for individual cycles to be examined without cycle-averaging|allowing inter-cycle variability studies. Results are shown for a turbo-charged, common-rail compression ignition engine run at 2000 rpm and full load.

Behaviour of LSF floor systems with improved joist sections under fire conditions

Fire safety design of buildings is essential to safeguard lives and minimize the loss of damage to properties. Light-weight cold-formed steel channel sections along with fire resistive plasterboards are used to construct light gauge steel frame floor systems to provide the required fire resistance rating. However, simply adding more plasterboard layers is not an efficient method to increase FRR. Hence this research focuses on using joists with improved joist section profiles such as hollow flange sections to increase the structural capacity of floor systems under fire conditions and thus their FRR. In this research, the structural and thermal behaviour of LSF floor systems made of LiteSteel Beams with different plasterboard and insulation configurations was investigated using four full scale tests under standard fires. Based on the ultimate failure load of the floor joist at ambient temperature, transient state fire tests were conducted for different Load Ratios. These fire tests showed that the new LSF floor system has improved the FRR well above that of those made of lipped channel sections. The joist failure was predominantly due to local buckling of LSB compression flanges near mid-span with severe yielding of tension flanges. Fire tests have provided valuable structural and thermal performance data of tested floor systems that included time-temperature profiles, and failure times and temperatures. Average failure temperatures of LSB joists and reduced yield strengths were used to predict their ultimate moment capacities, which were compared with corresponding test capacities. This allowed an assessment in relation to the accuracy of current design rules for steel joists at elevated temperatures. This paper presents the details of full scale fire tests of LSF floor systems made of LSB joists with different plasterboard and insulation configurations and their results along with some important findings.

Experimental studies of cold-formed steel hollow section columns at elevated temperatures

This paper reports the details of an experimental study of cold-formed steel hollow section columns at ambient and elevated temperatures. In this study the global buckling behaviour of cold-formed Square Hollow Section (SHS) slender columns under axial compression was investigated at various uniform elevated temperatures up to 700℃. The results of these column tests are reported in this paper, which include the buckling/failure modes at elevated temperatures, and ultimate load versus temperature curves. Finite element models of tested columns were also developed and their behaviour and ultimate capacities at ambient and elevated temperatures were studied. Fire design rules given in European and American standards including the Direct Strength Method (DSM) based design rules were used to predict the ultimate capacities of tested columns at elevated temperatures. Elevated temperature mechanical properties and stress-strain models given in European steel design standards and past researches were used with design rules and finite element models to investigate their effects on SHS column capacities. Comparisons of column capacities from tests and finite element analyses with those predicted by current design rules were used to determine the accuracy of currently available column design rules in predicting the capacities of SHS columns at elevated temperatures and the need to use appropriate elevated temperature material stress-strain models. This paper presents the important findings derived from the comparisons of these column capacities.

Strength properties of composite clay balls containing additives from industry wastes as new filter media in water treatment

Pebble matrix filtration (PMF) is a water treatment technology that can remove suspended solids in highly turbid surface water during heavy storms. PMF typically uses sand and natural pebbles as filter media. Hand-made clay pebbles (balls) can be used as alternatives to natural pebbles in PMF treatment plants, where natural pebbles are not readily available. Since the high turbidity is a seasonal problem that occurs during heavy rains, the use of newly developed composite clay balls instead of pure clay balls have the advantage of removing other pollutants such as natural organic matter (NOM) during other times. Only the strength properties of composite clay balls are described here as the pollutant removal is beyond the scope of this paper. These new composite clay balls must be able to withstand dead and live loads under dry and saturated conditions in a filter assembly. Absence of a standard ball preparation process and expected strength properties of composite clay balls were the main reasons behind the present study. Five different raw materials from industry wastes: Red Mud (RM), Water Treatment Alum Sludge (S), Shredded Paper (SP), Saw Dust (SD), and Sugar Mulch (SM) were added to common clay brick mix (BM) in different proportions. In an effort to minimize costs, in this study clay balls were fired to 1100 0C at a local brick factory together with their bricks. A comprehensive experimental program was performed to evaluate crushing strength of composite hand-made clay balls, using uniaxial compression test to establish the best material combination on the basis of strength properties for designing sustainable filter media for water treatment plants. Performance at both construction and operating stages were considered by analyzing both strength properties under fully dry conditions and strength degradation after saturation in a water bath. The BM-75% as the main component produced optimum combination in terms of workability and strength. With the material combination of BM-75% and additives-25%, the use of Red Mud and water treatment sludge as additives produced the highest and lowest strength of composite clay balls, with a failure load of 5.4 kN and 1.4 kN respectively. However, this lower value of 1.4 kN is much higher than the effective load on each clay ball of 0.04 kN in a typical filter assembly (safety factor of 35), therefore, can still be used as a suitable filter material for enhanced pollutant removal.

A finite element modelling method for thin layer mortared masonry systems

This paper deals with a finite element modelling method for thin layer mortared masonry systems. In this method, the mortar layers including the interfaces are represented using a zero thickness interface element and the masonry units are modelled using an elasto-plastic, damaging solid element. The interface element is formulated using two regimes; i) shear-tension and ii) shearcompression. In the shear-tension regime, the failure of joint is consiedered through an eliptical failure criteria and in shear-compression it is considered through Mohr Coulomb type failure criterion. An explicit integration scheme is used in an implicit finite element framework for the formulation of the interface element. The model is calibrated with an experimental dataset from thin layer mortared masonry prism subjected to uniaxial compression, a triplet subjected to shear loads a beam subjected to flexural loads and used to predict the response of thin layer mortared masonry wallettes under orthotropic loading. The model is found to simulate the behaviour of a thin layer mortated masonry shear wall tested under pre-compression and inplane shear quite adequately. The model is shown to reproduce the failure of masonry panels under uniform biaxial state of stresses.

Increased intra-cortical porosity reduces bone stiffness and strength in pediatric patients with osteogenesis imperfecta

Osteogenesis imperfecta (OI) is a heritable disease occurring in one out of every 20,000 births. Although it is known that Type I collagen mutation in OI leads to increased bone fragility, the mechanism of this increased susceptibility to fracture is not clear. The aim of this study was to assess the microstructure of cortical bone fragments from patients with osteogenesis imperfecta (OI) using polarized light microscopy, and to correlate microstructural observations with the results of previously performed mechanical compression tests on bone from the same source. Specimens of cortical bone were harvested from the lower limbs of three (3) OI patients at the time of surgery, and were divided into two groups. Group 1 had been subjected to previous micro-mechanical compression testing, while Group 2 had not been subjected to any prior testing. Polarized light microscopy revealed disorganized bone collagen architecture as has been previously observed, as well as a large increase in the areal porosity of the bone compared to typical values for healthy cortical bone, with large (several hundred micron sized), asymmetrical pores. Importantly, the areal porosity of the OI bone samples in Group 1 appears to correlate strongly with their previously measured apparent Young's modulus and compressive strength. Taken together with prior nanoindentation studies on OI bone tissue, the results of this study suggest that increased intra-cortical porosity is responsible for the reduction in macroscopic mechanical properties of OI cortical bone, and therefore that in vivo imaging modalities with resolutions of ~ 100 μm or less could potentially be used to non-invasively assess bone strength in OI patients. Although the number of subjects in this study is small, these results highlight the importance of further studies in OI bone by groups with access to human OI tissue in order to clarify the relationship between increased porosity and reduced macroscopic mechanical integrity.

Versatile single-layer sodium phosphidostannate(II): Strain-tunable electronic structure, excellent mechanical flexibility, and an ideal gap for photovoltaics

Density functional theory (DFT) calculations were performed to study the structural, mechanical, electrical, optical properties, and strain effects in single-layer sodium phosphidostannate(II) (NaSnP). We find the exfoliation of single-layer NaSnP from bulk form is highly feasible because the cleavage energy is comparable to graphite and MoS2. In addition, the breaking strain of the NaSnP monolayer is comparable to other widely studied 2D materials, indicating excellent mechanical flexibility of 2D NaSnP. Using the hybrid functional method, the calculated band gap of single-layer NaSnP is close to the ideal band gap of solar cell materials (1.5 eV), demonstrating great potential in future photovoltaic application. Furthermore, strain effect study shows that a moderate compression (2%) can trigger indirect-to-direct gap transition, which would enhance the ability of light absorption for the NaSnP monolayer. With sufficient compression (8%), the single-layer NaSnP can be tuned from semiconductor to metal, suggesting great applications in nanoelectronic devices based on strain engineering techniques.

Deficits on self ordered tasks associated with hyperostosis frontalis interna

A 74 year old patient, EW, with dorsolateral frontal cortical compression due to hyperostosis frontalis interna, in the absence of the Morgagni or Stewart-Morel syndromes, is described. In addition to conventional neuropsychological measures EW was administered one nonspatial and two spatial self ordered working memory tasks, as well as a standard measure of fluid intelligence or g. She showed impaired performance on all three self ordered working memory tasks compared with a normal control group of 10 subjects matched for age, education, sex, and IQ. By contrast, her performance on the fluid intelligence test was comparable with that of the controls. It is concluded that the compression of dorsolateral frontal cortex accompanying hyperostosis frontalis interna may produce selective cognitive impairment.

Fire design rules for load bearing cold-formed steel frame walls exposed to realistic design fire curves

Light gauge Steel Frame (LSF) walls are extensively used in the building industry due to the many advantages they provide over other wall systems. Although LSF walls have been used widely, fire design of LSF walls is based on approximate prescriptive methods based on limited fire tests. Also these fire tests were conducted using the standard fire curve [1] and the applicability of available design rules to realistic design fire curves has not been verified. This paper investigates the accuracy of existing fire design rules in the current cold-formed steel standards and the modifications proposed by previous researchers. Of these the recently developed design rules by Gunalan and Mahendran [2] based on Eurocode 3 Part 1.3 [3] and AS/NZS 4600 [4] for standard fire exposure [1] were investigated in detail to determine their applicability to predict the axial compression strengths and fire resistance ratings of LSF walls exposed to realistic design fire curves. This paper also presents the fire performance results of LSF walls exposed to a range of realistic fire curves obtained using a finite element analysis based parametric study. The results from the parametric study were used to develop a simplified design method based on the critical hot flange temperature to predict the fire resistance ratings of LSF walls exposed to realistic fire curves. Finally, the stud failure times (fire resistance rating) obtained from the fire design rules and the simplified design method were compared with parametric study results for LSF walls lined with single and double plasterboards, and externally insulated with rock fibres under realistic fire curves.