The Side Channel

I currently use the following method to have a different password on every website. password = sha1 ( mainPassword . domainName . number ) Here are the questions: Is this secure enough? I mean if somebody know my algorithm and one or many passwords, could he find easily one of my other passw...

3

Q: Is something wrong with this algorithm in terms of security?

I currently use the following method to have a different password on every website. password = sha1 ( mainPassword . domainName . number ) Here are the questions: Is this secure enough? I mean if somebody know my algorithm and one or many passwords, could he find easily one of my other passw...

algorithm encryption

Could everyone who has the powers (e.g. 500 rep) please close the first of these questions?

And could some moderator then merge these (e.g. move my answer to the other question)?

Thomas Pornin

9:56 PM

@PaŭloEbermann Still needs three votes

There are 6 users with 500+ rep, and 5 votes are needed to close.

We do not have a high margin there.

Paŭlo Ebermann

@ThomasPornin Yes. I already flagged for moderator attention, maybe you can do the same.

Thomas Pornin

flagging once should be sufficient