in reply to Creating a rainbow table for a ten-digit number: Advice?

The rainbow table affords you no security. Someone else can generate it just as easily as you.

  • Comment on Re: Creating a rainbow table for a ten-digit number: Advice?

Replies are listed 'Best First'.
Re^2: Creating a rainbow table for a ten-digit number: Advice?
by willyyam (Priest) on Apr 12, 2010 at 00:33 UTC

    Not without the salt they can't.

[reply]

      So you're going to rely on the data-collectors' memories to enter and re-enter the salt reliably hundreds or thousands of times (without reminders on yellow stickies "hidden" somewhere accessible)?

      And the salt will also be long enough to make deducing it from data available on the laptop(s) difficult enough that it will pass muster with your (hypothetical?) non-naive, non-ignorant ethics committee?

      Do you see any conflict among these notions?

      Was it the Red Queen or a Philadelphia comedian who "practice(d) believing two mutually contradictory notions before breakfast every day?"
      Neither?
      Well, how about Orwell's "doublethink?"

[reply]

        So you're going to rely on the data-collectors' memories to enter and re-enter the salt reliably hundreds or thousands of times

        The clerk only needs to enter the code whenever the application is launched, not for every record.

[reply]
      If they have access to the hashed ids on the laptop, they have access to the salt on the laptop too.
[reply]

        Not if it is entered manually each time the app is run and never stored to disk.

[reply]

In Section Seekers of Perl Wisdom