Jump to content


LoganDark's Content

There have been 172 items by LoganDark (Search limited from 10-February 22)


By content type

See this member's


Sort by                Order  

#251472 [V4.1 COMING!] LoganDark's Password Lock

Posted by LoganDark on 17 May 2016 - 08:56 PM in Programs

View PostAnavrins, on 17 May 2016 - 08:54 PM, said:

Now that's pretty sweet, first public lock using pbkdf2 :P
Few minor things that caught my attention, both in the genSalt function, the seed string contains repeated characters (1, P, p)
There's also an unnecessary math.randomseed(random(0,65534)) which will end up only producing a set of 65535 unique salt, instead of 6332.
Thanks, will consider in next version
edit: 65535 is nothing compared to
Spoiler
will consider in next version xD



#251463 [V4.1 COMING!] LoganDark's Password Lock

Posted by LoganDark on 17 May 2016 - 07:43 PM in Programs

Good tubular or bad tubular? I'm confused



#251461 [V4.1 COMING!] LoganDark's Password Lock

Posted by LoganDark on 17 May 2016 - 07:34 PM in Programs

Comments below were posted after version 4 of my password lock had been released.

To view comments for the most recent version of my system, click here.



#251447 SHA-256 in Pure Lua

Posted by LoganDark on 17 May 2016 - 05:22 PM in APIs and Utilities

View PostWaitdev_, on 17 May 2016 - 12:06 PM, said:

It's so awesome that you made this, do you mind if i put this in my new program? I've given you a bit of credit and put a link to this thread, is there anything else that you want me to do or is it fine the way I've done it? Thanks.

I'm sure he won't mind. I've used it in the first, second and third versions of my password lock with no problem. ( ͡° ͜ʖ ͡°)



#251231 [V4.1 COMING!] LoganDark's Password Lock

Posted by LoganDark on 01 May 2016 - 02:28 AM in Programs

Fatal JavaScript error using Mimic.

pbkdf2(data, salt, 1, 64) --# Using 64 because I want to.



#251229 [V4.1 COMING!] LoganDark's Password Lock

Posted by LoganDark on 01 May 2016 - 02:00 AM in Programs

View PostAnavrins, on 01 May 2016 - 01:59 AM, said:

It's pretty much that, it needs SHA2 and HMAC to work, it's as compact as it can be.

Okay, thanks.



#251227 [V4.1 COMING!] LoganDark's Password Lock

Posted by LoganDark on 01 May 2016 - 01:45 AM in Programs

View PostAnavrins, on 30 April 2016 - 06:04 AM, said:

If you want to try out pbkdf2, I added it to my sha256 file http://pastebin.com/6UV4qfNF.
Functionality is pbkdf2(password, salt, iter, dklen)
Password and salt are self explanatory, iter is the number of iteration, more iteration makes it more slow, you can fine tune it to be not too slow but not so fast.
You don't need to touch dklen, this is the desired output length in bytes, it's defaulted to 32 and shouldn't be more than that for password storage, it's pretty much only useful for when you need more than 32 bytes of key material for ciphers and other.

This is a proper algorithm to make bruteforce slower, it's used in things like iPhone's pins, LastPass master keys and more.
It also passes the test vectors at https://stackoverflo...a2-test-vectors

Can you give a version with just pbkdf2 and make it as compact as possible?



#251124 Quality custom-made logos!

Posted by LoganDark on 29 April 2016 - 12:47 AM in Media

View PostLoganDark, on 27 April 2016 - 03:26 PM, said:

View PostLewisTehMinerz, on 27 April 2016 - 03:22 PM, said:

View PostZayne, on 24 April 2016 - 07:10 PM, said:

Text: Porty

Special style: landscape image

Size 1280x720

Font: Data Control

File format: SVG & PNG

Just pushing this up for Logan to see.

Oh, sorry, for some reason it only notifies me once. Silly me!

Edit: Can't do it now.

Osht. Completely forgot. Working on it now.

Can I use a different font, that still looks techy?



#251064 Quality custom-made logos!

Posted by LoganDark on 27 April 2016 - 03:26 PM in Media

View PostLewisTehMinerz, on 27 April 2016 - 03:22 PM, said:

View PostZayne, on 24 April 2016 - 07:10 PM, said:

Text: Porty

Special style: landscape image

Size 1280x720

Font: Data Control

File format: SVG & PNG

Just pushing this up for Logan to see.

Oh, sorry, for some reason it only notifies me once. Silly me!

Edit: Can't do it now.



#250995 [V4.1 COMING!] LoganDark's Password Lock

Posted by LoganDark on 25 April 2016 - 11:13 PM in Programs

View PostAnavrins, on 25 April 2016 - 11:11 PM, said:

-snip-

I would also recommend using my implementation of SHA2, -snip-

Can you create a version which has the bit32 functions included? Mimic doesn't have bit32, and bit doesn't have blshift (or brshift; can't remember).



#250988 [REQUEST] Wait for keypress or time

Posted by LoganDark on 25 April 2016 - 10:31 PM in Ask a Pro

View PostLyqyd, on 25 April 2016 - 09:25 PM, said:

Moved to Ask a Pro.

Better to lock too, since my problem was solved. It also introduced me to parallel.waitForAny.



#250986 [V4.1 COMING!] LoganDark's Password Lock

Posted by LoganDark on 25 April 2016 - 10:29 PM in Programs

View PostLuca_S, on 25 April 2016 - 08:16 PM, said:

View PostLoganDark, on 25 April 2016 - 07:46 PM, said:

I am working on version 4 of my password lock system. Have suggestions? Now is the time to pitch in.

View PostLDDestroier, on 25 April 2016 - 07:32 PM, said:

If you'd sacrifice speed and convenience for an insignificant security boost, at least have a config option to make it hash once.

Edit: I tested it:

Hash 1 time: 0.05 seconds
Hash 50 times: 2.5 seconds

We are talking about 2.45 seconds longer for a really insignificant change of security.

I've already considered that. The answer: completely ditching 50 hashes for 1.



#250973 [V4.1 COMING!] LoganDark's Password Lock

Posted by LoganDark on 25 April 2016 - 07:46 PM in Programs

I am working on version 4 of my password lock system. Have suggestions? Now is the time to pitch in.



#250972 [REQUEST] Wait for keypress or time

Posted by LoganDark on 25 April 2016 - 07:45 PM in Ask a Pro

View PostLDDestroier, on 25 April 2016 - 07:43 PM, said:

I actually made the help screen of my QuickDraw game so that it slowly prints the help text, but if you press a button, it instantly displays the text. It's neato

I just had to use parallel.waitForAny.



#250968 [REQUEST] Wait for keypress or time

Posted by LoganDark on 25 April 2016 - 07:40 PM in Ask a Pro

View PostmasterdisasterHD, on 25 April 2016 - 07:37 PM, said:

try this:

local timeout = 3

function ontimer()
sleep(timeout)
end

function onkey()
os.pullEvent('key')
end

parallel.waitForAny(ontimer, onkey) --This waits for either of the 2 functions to finish before continuing
--Further processing below this line

Thanks!



#250965 [V4.1 COMING!] LoganDark's Password Lock

Posted by LoganDark on 25 April 2016 - 07:35 PM in Programs

View PostJiloacom, on 25 April 2016 - 07:33 PM, said:

View PostAnavrins, on 25 April 2016 - 07:05 PM, said:

Well, it's slow, which is a good thing, but not more secure, this construction is as strong as the inner most hash iteration in the loop.
Granted, it's probably never going to be cracked, but stating it's more secure is false, and because of that, having 50 salts is redundant and a of waste space.

Wait.. Since when has slow ever been a good thing? Just because one hash or encryption algorithm is slower than another, doesn't mean it's more secure. And in some scenarios, such as a computer lock (where I don't want to wait 10 seconds for my computer to unlock every time I reboot it), I think I'd prefer a faster, less secure algorithm than a slower, slightly more secure one.

Slower deters brute-force. But it's not that much more secure.



#250964 [REQUEST] Wait for keypress or time

Posted by LoganDark on 25 April 2016 - 07:34 PM in Ask a Pro

Are requests even allowed in this section?

I'd like a function that waits for a user to press a key, but after a specific amount of seconds, if the user hasn't pressed a key (it should skip instantly if you do) it skips automatically. Is that possible?

I have good knowledge with CC Lua, so feel free to explain it as technical as you want.



#250960 [V4.1 COMING!] LoganDark's Password Lock

Posted by LoganDark on 25 April 2016 - 07:29 PM in Programs

View PostAnavrins, on 25 April 2016 - 07:05 PM, said:

View PostLoganDark, on 25 April 2016 - 06:57 PM, said:

I wanted it slow, but also secure. Hashing with 50 different salts is very secure, possibly even unbreakable without the help of the salts which are stored conveniently in the file for all to use lol.
Well, it's slow, which is a good thing, but not more secure, this construction is as strong as the inner most hash iteration in the loop.
Granted, it's probably never going to be cracked, but stating it's more secure is false, and because of that, having 50 salts is redundant and a of waste space.

Sure, it's not that more secure, but it's more secure nonetheless. Argument or not, it is, but it's not an improvement as much as from plaintext to 1 hash.



#250957 [V4.1 COMING!] LoganDark's Password Lock

Posted by LoganDark on 25 April 2016 - 07:00 PM in Programs

View PostAnavrins, on 25 April 2016 - 06:54 PM, said:

This happens with every stream cipher, RC4, Chacha20, AES-CTR, but not hashes.
The problem with multiple hashing is that it doesn't change the odds of finding a collisions or make it more secure, it only makes it slow, which I think is just what Logan wanted out of it.
Although his implementation is pretty much equivalent to hashing the password with a huge salt, which is kind of wasteful.
Something similar to pbkdf2, would be the best here, since you can fine tune how slow you want it to run, without the need of 50 different salts.

I might give implementing pbkdf2 a shot later today.

I wanted it slow, but also secure. Hashing with 50 different salts is very secure, possibly even unbreakable without the help of the salts which are stored conveniently in the file for all to use lol.

Note: Non-malicious modifications to my system are now allowed. Anavrins, do what you please with the algorithm. :P



#250952 Quality custom-made logos!

Posted by LoganDark on 25 April 2016 - 06:36 PM in Media

View PostCreator, on 25 April 2016 - 06:34 PM, said:

View PostLoganDark, on 25 April 2016 - 06:31 PM, said:

View PostCreator, on 25 April 2016 - 05:33 PM, said:

Could you provide a zip, we could download. Please also include the files you used for editing. (Photoshop files or similar)

Sure.

The old logos have also been deleted. If you want to download any you must use the zip file.

Thanks a lot!!!

You're welcome, I wouldn't want everybody to lose their logos. Thanks for the idea to use a zip file, though. Now your logos are (non-securely) held on my servers. :P



#250950 Quality custom-made logos!

Posted by LoganDark on 25 April 2016 - 06:31 PM in Media

View PostCreator, on 25 April 2016 - 05:33 PM, said:

Could you provide a zip, we could download. Please also include the files you used for editing. (Photoshop files or similar)

Sure.

The old logos have also been deleted. If you want to download any you must use the zip file.



#250942 [V4.1 COMING!] LoganDark's Password Lock

Posted by LoganDark on 25 April 2016 - 05:13 PM in Programs

View PostmoTechPlz, on 21 March 2016 - 03:56 PM, said:

Hi, about the sleep thing, you could do both. Use a timer to wait 2 or 3 seconds or skip when the 'anykey' is pressed.

I have an idea on how to do that, but I'm not quite sure about it. Can you provide an example?

Edit: post not needed



#250941 Quality custom-made logos!

Posted by LoganDark on 25 April 2016 - 05:10 PM in Media

I'm deleting all the old logos in a few hours, excluding LDDestroier's logo and future logos. Please, DOWNLOAD YOUR LOGOS IF YOU WANT THEM. I will lost all of the project files (except future projects and LDDestroier's of course), so I will have to start from scratch if you want something changed.



#250940 Quality custom-made logos!

Posted by LoganDark on 25 April 2016 - 05:05 PM in Media

View PostLDDestroier, on 25 April 2016 - 11:45 AM, said:

Um. I dunno, mine looks slicker...I guess? Yours looks like it could be sewn to a jacket.

What would you prefer in the logo? I'd be happy to remake it.



#250899 Quality custom-made logos!

Posted by LoganDark on 25 April 2016 - 08:34 AM in Media

View PostLDDestroier, on 25 April 2016 - 02:56 AM, said:

Cuz I like mine own better than thine own.

How so?