Return to bcrypt-paper.pdf CVS log | Up to [local] / www / papers |
File: [local] / www / papers / bcrypt-paper.pdf (download)
Revision 1.1, Mon Sep 6 16:07:55 2004 UTC (19 years, 8 months ago) by marco
Add 2 more. |
%PDF-1.3 %туЯг 2 0 obj << /Length 17583 >> stream BT /T1 1 Tf 0.12 0 0 -0.12 168 696.0601 Tm 0 g /GS1 gs 0 Tc 0 Tw (A)Tj 145.9999 0 TD (F)Tj 74 0 TD (uture Adaptable)Tj 1015.0001 0 TD (P)Tj 88 0 TD (assw)Tj 264 0 TD (ord)Tj 243 0 TD (Sc)Tj 131 0 TD (heme)Tj /T2 1 Tf -1530 241.0005 TD [(Niels)-31999.9(Pro)]TJ 392 0 TD (v)Tj 47.9998 0 TD (os)Tj 121.0002 0 TD -0.0001 Tc (and)Tj 189 0 TD 0 Tc (Da)Tj 120.9998 0 TD [(vid)-32000(Mazi)]TJ 371.0002 0 TD ( )Tj 2.9998 0 TD 0.0001 Tc (eres)Tj /T3 1 Tf -1101.9998 116 TD 0 Tc (f)Tj /T2 1 Tf 50 0 TD (pro)Tj 138 0 TD (v)Tj 48 0 TD -0.0001 Tc (osdm)Tj /T3 1 Tf 250 0 TD 0 Tc (g)Tj /T2 1 Tf 50 0 TD [(op)-3000(en)]TJ 276 0 TD (bsdorg)Tj /T4 1 Tf -726 116.9995 TD (The)Tj 200 0 TD (Op)Tj 120 0 TD (enBSD)Tj 331 0 TD -0.0002 Tc (Pr)Tj 101.9998 0 TD 0.0001 Tc (oje)Tj 120 0 TD 0 Tc (ct)Tj /T5 1 Tf -2333 325 TD (Abstract)Tj /T6 1 Tf 0 244.0005 TD (Man)Tj 162 0 TD (y)Tj 100 0 TD (authen)Tj 247 0 TD (tication)Tj 334 0 TD (sc)Tj 68 0 TD (hemes)Tj 278 0 TD [(dep)-2000(end)]TJ 318.0001 0 TD (on)Tj 144.9998 0 TD (secret)Tj -1651.9999 100 TD (passw)Tj 212 0 TD (ords )Tj 285.0001 0 TD (Unfortunately)Tj 503 0 TD ()Tj 81 0 TD -0.0001 Tc (the)Tj 166.9999 0 TD 0 Tc (length)Tj 278.0001 0 TD -0.0001 Tc (and)Tj 186 0 TD (ran)Tj -1712.0001 100 TD 0 Tc (domness)Tj 363.0001 0 TD -0.0001 Tc (of)Tj 123.9999 0 TD 0 Tc (userc)Tj 212 0 TD (hosen)Tj 260 0 TD (passw)Tj 212 0 TD (ords)Tj 209.0001 0 TD -0.0001 Tc (remain)Tj 307 0 TD (xed)Tj -1687.0001 99 TD 0 Tc (o)Tj 40 0 TD (v)Tj 42.0001 0 TD (er)Tj 116 0 TD -0.0001 Tc (time )Tj 281.9999 0 TD 0 Tc (In)Tj 124 0 TD (con)Tj 123 0 TD (trast)Tj 247.0001 0 TD (hardw)Tj 225 0 TD (are)Tj 157.9999 0 TD (impro)Tj 211.0001 0 TD (v)Tj 42 0 TD -0.0001 Tc (emen)Tj 187 0 TD 0 Tc (ts)Tj -1797.0001 100 TD (constan)Tj 276.0001 0 TD -0.0001 Tc (tly)Tj 131.9999 0 TD 0 Tc (giv)Tj 107 0 TD (e)Tj 70 0 TD (attac)Tj 183 0 TD (k)Tj 42 0 TD [(ers)-31000(increasing)]TJ 529 0 TD (computational)Tj -1339 99 TD 2.0001 Tc (po)Tj 88.0001 0 TD 0 Tc (w)Tj 57.9999 0 TD 0.0001 Tc (er )Tj 146.0001 0 TD 0 Tc (As)Tj 128 0 TD (a)Tj 74.9999 0 TD (result)Tj 262 0 TD (passw)Tj 212 0 TD [(ord)-31000(sc)]TJ 220 0 TD (hemes)Tj 255 0 TD -0.0001 Tc (suc)Tj 113.9999 0 TD 0 Tc (h)Tj 79.0002 0 TD (as)Tj 107.9998 0 TD 0.0001 Tc (the)Tj -1744.9999 100 TD 0 Tc (traditional)Tj 434 0 TD (UNIX)Tj 267 0 TD (userauthen)Tj 424 0 TD (tication)Tj 326.0001 0 TD (system)Tj 298 0 TD (are)Tj -1749.0001 100 TD [(failing)-27000(w)0.1(ith)-27999.9(t)-0.1(ime )]TJ 0 198.9998 TD 0.0001 Tc (This)Tj 202.9999 0 TD [(pap)-1999.8(er)]TJ 246.0001 0 TD 0 Tc (discusses)Tj 362 0 TD (w)Tj 58 0 TD (a)Tj 40 0 TD (ys)Tj 116 0 TD (of)Tj 108 0 TD (building)Tj 336.0001 0 TD (systems)Tj 322 0 TD -0.0002 Tc (in)Tj -1791.0001 100 TD 0.0001 Tc (whic)Tj 164.0001 0 TD 0 Tc (h)Tj 87.9999 0 TD (passw)Tj 212 0 TD (ord)Tj 162 0 TD (securit)Tj 239 0 TD (y)Tj 85.0001 0 TD (k)Tj 41.9999 0 TD (eeps)Tj 195.0001 0 TD -0.0001 Tc (up)Tj 133.9999 0 TD 0 Tc (with)Tj 204.0001 0 TD (hardw)Tj 225 0 TD (are)Tj -1750.0001 99 TD [(sp)-2000(eeds )]TJ 309 0 TD (W)Tj 78 0 TD (e)Tj 71 0 TD [(formalize)-32000(the)]TJ 511 0 TD [(prop)-2000(erties)-32000(desirable)-30999.8(in)]TJ 849.0001 0 TD (a)Tj -1818.0001 100 TD 0.0001 Tc [(go)-1999.8(o)-1999.9(d)]TJ 209 0 TD 0 Tc (passw)Tj 212 0 TD [(ord)-31000(s)-0.1(ystem)]TJ 458 0 TD (and)Tj 167 0 TD (sho)Tj 119 0 TD (w)Tj 93 0 TD (that)Tj 186 0 TD (the)Tj 148.0001 0 TD -0.0001 Tc (compu)Tj -1592.0001 99 TD 0 Tc (tational)Tj 317.0001 0 TD (cost)Tj 180.0001 0 TD -0.0001 Tc (of)Tj 103 0 TD (an)Tj 85.9999 0 TD 0 Tc (y)Tj 79 0 TD (secure)Tj 258 0 TD (passw)Tj 212 0 TD (ord)Tj 155 0 TD (sc)Tj 67.9999 0 TD 0.0001 Tc (heme)Tj 224.0002 0 TD 0 Tc (m)Tj 67 0 TD -0.0001 Tc (ust)Tj -1749.0001 100 TD 0 Tc [(increase)-28000(a)0.1(s)-29000.1(h)0(ardw)]TJ 645 0 TD [(are)-28000(impro)]TJ 351 0 TD (v)Tj 42 0 TD (es )Tj 135 0 TD (W)Tj 78 0 TD [(e)-30000.1(p)0.1(resen)]TJ 297.0001 0 TD 28.9998 Tc (tt)Tj 90.9998 0 TD 0 Tc (w)Tj 58.0002 0 TD 29 Tc [(oa)29000(l)29000.2()]TJ -1697.0001 100 TD 0 Tc [(gorithms)-29000(with)-31000.1(adaptable)-29000(cost)]TJ /T7 1 Tf 1152.9999 0 TD (eksblow sh)Tj /T6 1 Tf 389.0002 0 TD 32 Tc [(a)2000(b)32000.2(l)31999.8(o)30000(c)]TJ 275 0 TD 0 Tc (k)Tj -1817.0001 99.0002 TD [(cipher)-32000(with)]TJ 448 0 TD (a)Tj 74.0001 0 TD [(purp)-1999.9(osefully)]TJ 478.9999 0 TD [(exp)-2000.1(ensiv)]TJ 310.0001 0 TD 32 Tc (ek)Tj 110.9999 0 TD 0.0001 Tc [(ey)-30999.7(sc)]TJ 179.9999 0 TD 0 Tc (hedule)Tj -1601.9999 100 TD 0.0001 Tc (and)Tj /T7 1 Tf 166.0001 0 TD 0 Tc (b)Tj 33.9999 0 TD (crypt)Tj /T6 1 Tf 183.0001 0 TD ()Tj 58.0001 0 TD [(a)-31999.9(related)-32000(h)0.1(ash)-31999.9(function )]TJ 927.9999 0 TD (F)Tj 47 0 TD [(ailing)-32000(a)]TJ 306.0001 0 TD -0.0001 Tc (ma)Tj -1722.0001 100 TD 0.0001 Tc (jor)Tj 146 0 TD 0 Tc (breakthrough)Tj 533 0 TD (in)Tj 116 0 TD (complexit)Tj 351 0 TD (y)Tj 90.0001 0 TD (theory)Tj 227 0 TD ()Tj 73 0 TD (these)Tj 232 0 TD -0.0001 Tc (al)Tj -1768.0001 99 TD 0 Tc (gorithms)Tj 359 0 TD (should)Tj 277 0 TD (allo)Tj 128 0 TD (w)Tj 99 0 TD (passw)Tj 212 0 TD (ordbased)Tj 390.0001 0 TD (systems)Tj 321 0 TD (to)Tj -1786.0001 100 TD [(adapt)-21999.9(t)0(o)-22000.1(h)0(ardw)]TJ 551 0 TD [(are)-21000(impro)]TJ 344 0 TD (v)Tj 42.0001 0 TD (emen)Tj 187 0 TD [(ts)-20999.9(and)-22000(remain)-22000.2(s)0.2(ecure)]TJ -1124.0001 99 TD (w)Tj 58 0 TD [(ell)-27000(i)-0.1(n)]TJ 177.0001 0 TD [(to)-27999.9(the)-28000(future )]TJ /T5 1 Tf -235.0001 310.9998 TD ( )Tj 168 0 TD 0.0001 Tc (In)Tj 101.0001 0 TD 0 Tc [(tro)-3000(duction)]TJ /T6 1 Tf -269.0001 244 TD (As)Tj 130 0 TD [(micropro)-1999.9(c)-0.1(essors)-30999.9(gro)]TJ 721 0 TD (w)Tj 93 0 TD (faster)Tj 261.0001 0 TD -0.0001 Tc (so)Tj 108.9999 0 TD 0 Tc [(do)-2000(es)]TJ 195.0001 0 TD (the)Tj 149.9998 0 TD 0.0001 Tc [(sp)-1999.7(eed)]TJ -1658.9999 100.0001 TD 0 Tc [(of)-22999.9(cryptographic)-22000(soft)]TJ 745 0 TD (w)Tj 58.0001 0 TD -0.0001 Tc (are )Tj 167.9999 0 TD 0 Tc (F)Tj 47.0001 0 TD [(ast)-22999.9(c)0(ryptograph)]TJ 570.9998 0 TD 21.0002 Tc [(yo)21000.4(p)19000(e)21000.2(n)21000.4(s)]TJ -1588.9999 99 TD 0 Tc (man)Tj 155 0 TD (y)Tj 86.0001 0 TD [(opp)-1999.9(o)-0.1(rtunities)]TJ 525.9999 0 TD 0.0001 Tc (for)Tj 142 0 TD 0 Tc (making)Tj 308 0 TD (systems)Tj 322.9999 0 TD (more)Tj 223.0002 0 TD -0.0001 Tc (se)Tj -1763.0001 100 TD 0 Tc (cure )Tj 216.0001 0 TD [(It)-29000.1(renders)-27000(encryption)-28000(usable)-28000.2(for)-28000(a)-28999.9(wide)-28000.2(range)]TJ -216.0001 100 TD [(of)-25000(applications )]TJ 585 0 TD [(It)-26000(also)-24000(p)-2000(e)0.1(rmits)-25000.1(l)0.1(arger)-24000(v)]TJ 825 0 TD [(alues)-25000(o)0(f)-25000(t)0(un)]TJ -1410 99 TD (able)Tj 188.0001 0 TD (securit)Tj 238.9999 0 TD (y)Tj 84 0 TD (parameters)Tj 443 0 TD (suc)Tj 114.0001 0 TD (h)Tj 85.9999 0 TD (as)Tj 115 0 TD (k)Tj 42.0001 0 TD -0.0001 Tc (ey)Tj 119.9999 0 TD 0 Tc (length )Tj 325.0001 0 TD -0.0001 Tc (In)Tj -1756.0001 100 TD 0 Tc (creasing)Tj 336 0 TD (securit)Tj 239.0001 0 TD (y)Tj 87.9999 0 TD (parameters)Tj 448.0001 0 TD -0.0001 Tc (mak)Tj 152.9999 0 TD 0 Tc (es)Tj 114 0 TD (cryptograph)Tj 441.0001 0 TD (y)Tj -1819.0001 100 TD [(exp)-2000.1(onen)]TJ 298.0001 0 TD [(tially)-29999.9()-0.1(or)-29000(at)-30000(least)-30000(sup)-1999.9(e)0(rp)-1999.9(olynomially)-30000(more)]TJ -298.0001 99 TD [(dicult)-29999.9(to)-27999.9(break)-29000(dw)]TJ 766 0 TD [(arng)-27000(an)]TJ 322 0 TD [(y)-28000(b)-2000(enet)-29999.9(f)0.2(aster)-27999.8(hard)]TJ -1088 100 TD (w)Tj 58 0 TD (are)Tj 151 0 TD -0.0001 Tc (ma)Tj 109 0 TD 0 Tc (y)Tj 84 0 TD (oer)Tj 200 0 TD (attac)Tj 183 0 TD (k)Tj 42 0 TD 0.0001 Tc (ers )Tj 200 0 TD 0 Tc (Unfortunately)Tj 503.0001 0 TD ()Tj 67 0 TD (one)Tj 166 0 TD -0.0001 Tc (se)Tj -1763.0001 99 TD 0 Tc (curit)Tj 169.0001 0 TD (y)Tj 76.9999 0 TD (parameterthe)Tj 602 0 TD (length)Tj 259 0 TD (and)Tj 168 0 TD 0.0001 Tc (en)Tj 81 0 TD 0 Tc (trop)Tj 151.0001 0 TD 31.9998 Tc [(yo)31999.6(f)]TJ 176.9998 0 TD 0 Tc (user)Tj -1683.9999 100 TD (c)Tj 35.0001 0 TD [(hosen)-31000.1(p)0(assw)]TJ 446.9999 0 TD [(ordsdo)-2000.1(es)-30000(not)]TJ 579 0 TD [(scale)-32000(a)0(t)-32000(all)-32000(with)]TJ 624.0001 0 TD -0.0001 Tc (com)Tj -1685.0001 100 TD 0 Tc [(puting)-25000.1(p)-1999.9(o)]TJ 348.0001 0 TD (w)Tj 57.9999 0 TD 0.0001 Tc (er )Tj 128.0001 0 TD 0 Tc [(While)-26000(man)]TJ 395 0 TD [(y)-23999.9(s)-0.2(ystems)-25000(require)-24000(users)-24000(t)0(o)]TJ -929 99 TD (c)Tj 35.0001 0 TD [(ho)-1999.9(ose)-28000.1(s)-0.1(ecret)-29000.1(passw)]TJ 679.9999 0 TD [(ords)-27000(for)-29000(authen)]TJ 557 0 TD [(tication)-29999.8(few)-30000.2(ac)]TJ -1272 100 TD [(tually)-23999.9(adapt)-22999.9(t)-0.1(heir)-23999.9(algorithms)-21999.9(to)-23999.9(preserv)]TJ 1426 0 TD [(e)-22000(securit)]TJ 298.0001 0 TD 23 Tc [(yi)23000.2(n)]TJ 286 -4286.0005 TD 0 Tc [(the)-28000(face)-27000(of)-28000.2(increasingly)-26000.2(p)-1999.8(o)]TJ 949 0 TD (w)Tj 58 0 TD [(erful)-27000(attac)]TJ 374 0 TD (k)Tj 42 0 TD 0.0001 Tc (ers )Tj -1423 199.0005 TD -0.0001 Tc (One)Tj 183 0 TD 0 Tc (widespread)Tj 437 0 TD (use)Tj 150 0 TD (of)Tj 101.9998 0 TD 0.0001 Tc (passw)Tj 212 0 TD (ords)Tj 212 0 TD (and)Tj 169 0 TD 0 Tc (a)Tj 76.0002 0 TD [(go)-2000(o)-1999.5(d)]TJ 211 0 TD (ex)Tj -1752 100 TD -0.0001 Tc (ample)Tj 257 0 TD 0 Tc (of)Tj 107 0 TD (failure)Tj 269 0 TD -0.0002 Tc (to)Tj 113.9998 0 TD 0 Tc (adapt)Tj 274 0 TD 0.0002 Tc (is)Tj 96 0 TD 0.0001 Tc (the)Tj 155.0002 0 TD (UNIX)Tj 257 0 TD 0 Tc (passw)Tj 212 0 TD (ord)Tj -1741 100 TD (system )Tj 327 0 TD -0.0001 Tc (UNIX)Tj 274 0 TD 0 Tc (a)Tj 76 0 TD (m)Tj 67 0 TD (ultiuser)Tj 333.9998 0 TD 0.0001 Tc [(op)-1999.7(erating)]TJ 378.0002 0 TD 0 Tc (system)Tj 307 0 TD (re)Tj -1763 99 TD [(quires)-26999.8(users)-27000.2(to)-27000(pro)]TJ 671.9998 0 TD (v)Tj 42.0002 0 TD [(e)-26000(t)0.2(heir)-28000.2(iden)]TJ 412 0 TD (tit)Tj 85 0 TD -0.0001 Tc [(y)-27000.1(b)-1999.9(efore)-28000.1(accessing)]TJ -1211 100 TD 0 Tc [(system)-30000(resources )]TJ 673 0 TD [(A)-29999.8(u)-0.2(ser)-29000(t)]TJ 300 0 TD [(ypically)-28999.8(b)-2000.2(egins)-29999.5(a)-29000.5(session)]TJ -973 100 TD (b)Tj 44 0 TD 22.9998 Tc [(yp)22999.6(r)22999.8(o)]TJ 185.9998 0 TD 0 Tc [(viding)-21000(her)-23000(username)-21999.8(and)-23000.2(secret)-21999.8(p)-0.2(assw)]TJ 1349.0002 0 TD [(ord)-22000(to)-21999.5(a)]TJ -1579 99 TD [(login)-24000.2(p)0(rogram )]TJ 564 0 TD [(This)-24000.2(p)0(rogram)-21999.8(then)-24999.8(v)]TJ 743 0 TD [(eries)-23000(the)-25000(pass)]TJ -1307 100 TD (w)Tj 58 0 TD [(ord)-29000(using)-29000(a)-28999.8(systemwide)-29000.2(p)0.2(assw)]TJ 1123 0 TD [(ord)-27999.8(le )]TJ 321 0 TD (Giv)Tj 130 0 TD -0.0001 Tc [(en)-30000.1(the)]TJ -1632 98.9998 TD 0 Tc [(imp)-2000.2(ortance)-23000.2(of)-22999.8(k)]TJ 564 0 TD -0.0001 Tc [(eeping)-23000.1(p)-0.3(assw)]TJ 465.9998 0 TD 0 Tc [(ords)-20999.8(secret)-23000(UNIX)-24000(do)-2000.5(es)]TJ -1029.9998 100 TD (not)Tj 153.9998 0 TD [(store)-32000(p)0.2(lain)]TJ 387 0 TD (text)Tj 179.0002 0 TD (passw)Tj 212 0 TD -0.0001 Tc [(ords)-31000.1(i)-0.1(n)]TJ 288 0 TD (this)Tj 167 0 TD -0.0003 Tc (le )Tj 184 0 TD 0 Tc (Instead)Tj -1571 100 TD -0.0002 Tc [(it)-27000.4(k)]TJ 124 0 TD 0.0001 Tc (eeps)Tj /T7 1 Tf 178 0 TD 0 Tc (hashes)Tj /T6 1 Tf 267 0 TD [(of)-26000(passw)]TJ 305 0 TD [(ords)-24000.2(u)0.2(sing)-25999.8(a)-26000.2(onew)]TJ 696 0 TD (a)Tj 40 0 TD 0.0001 Tc [(y)-23999.9(func)]TJ -1610 99.0002 TD 0 Tc (tion)Tj /T7 1 Tf 189 0 TD (crypt)Tj /T6 1 Tf 212 0 TD [( \012)-21999.8(that)-22000.2(can)-20999.8(only)-20000(b)-2000.2(e)-22000(in)]TJ 801.9998 0 TD (v)Tj 42.0002 0 TD [(erted)-20000(b)]TJ 249 0 TD -0.0001 Tc [(y)-21000.1(guessing)]TJ -1494 100 TD 0 Tc (preimages )Tj 420 0 TD (T)Tj 52.9998 0 TD 24.0002 Tc (ov)Tj 108.0002 0 TD 0 Tc [(erify)-24999.8(a)-24000(passw)]TJ 464.9998 0 TD [(ord)-24000.2(the)-26000(l)0(ogin)-23999.5(program)]TJ -1045.9998 100 TD [(hashes)-24000(the)-25000(p)0.2(assw)]TJ 613 0 TD [(ord)-23000(and)-23999.8(compares)-24000(the)-24999.8(r)-0.2(esult)-24000(to)-24999.5(the)]TJ -613 99 TD [(appropriate)-26000(hash)-26999.8(in)-28000.2(the)-28000.2(p)0.2(assw)]TJ 1094 0 TD [(ord)-24999.8(le )]TJ -1094 199 TD (A)Tj 59.9998 0 TD [(t)-22000.2(t)0(he)-22000.2(time)-21999.8(of)-21999.8(deplo)]TJ 655 0 TD (ymen)Tj 194 0 TD -0.0001 Tc [(t)-21000.3(i)0.1(n)-22000.1()-0.3(\012\015)]TJ /T7 1 Tf 356 0 TD 0.0001 Tc (crypt)Tj /T6 1 Tf 213 0 TD [(could)-20999.4(hash)]TJ -1477.9998 100 TD 0 Tc (few)Tj 120 0 TD [(er)-30000(than)-29999.8()-31000.2(p)0.2(assw)]TJ 581 0 TD [(ords)-28000.2(p)-2000(e)0(r)-29999.8(s)-0.2(econd )]TJ 638.9998 0 TD 0.0001 Tc [(Since)-30999.9(the)-29999.4(only)]TJ -1339.9998 100 TD 0 Tc (kno)Tj 129.9998 0 TD 0.0002 Tc (wn)Tj 149 0 TD 0 Tc (w)Tj 58.0002 0 TD (a)Tj 40 0 TD (y)Tj 86 0 TD -0.0002 Tc (of)Tj 111 0 TD (in)Tj 66.9998 0 TD 0 Tc (v)Tj 42.0002 0 TD -0.0001 Tc (erting)Tj /T7 1 Tf 256 0 TD 0 Tc (crypt)Tj /T6 1 Tf 235 0 TD (is)Tj 99 0 TD -0.0002 Tc (to)Tj 117.9998 0 TD 0 Tc (guess)Tj 234.0002 0 TD (preim)Tj -1625 99 TD -0.0001 Tc (ages)Tj 215.9998 0 TD 0.0001 Tc (the)Tj 153.0002 0 TD 0 Tc (algorithm)Tj 389 0 TD -0.0001 Tc (made)Tj 231 0 TD (passw)Tj 212 0 TD 0 Tc (ords)Tj 189.9998 0 TD (v)Tj 42 0 TD 0.0001 Tc (ery)Tj 150.0002 0 TD 0 Tc (dicult)Tj -1583 100 TD (to)Tj 108 0 TD 0.0001 Tc (reco)Tj 146.9998 0 TD 0 Tc (v)Tj 42 0 TD (er)Tj 102.0002 0 TD (from)Tj 203 0 TD (their)Tj 206 0 TD (hashesso)Tj 428 0 TD (m)Tj 66.9998 0 TD 0.0002 Tc (uc)Tj 81.0002 0 TD 0 Tc (h)Tj 80 0 TD (so)Tj 133 0 TD (in)Tj 104 0 TD (fact)Tj -1701 100 TD [(that)-25999.8(the)-27000(d)0.2(esigners)-24000.2(of)-26000(UNIX)-27000.2(felt)-25999.8(comfortable)-25000(lea)]TJ 1706 0 TD -0.0002 Tc (ving)Tj -1706 99 TD -0.0001 Tc [(the)-28000.1(p)-0.3(assw)]TJ 354.9998 0 TD 0 Tc [(ord)-26000.2(le)-28000(readable)-26000.2(b)]TJ 657.0002 0 TD [(y)-27000(all)-28000(users )]TJ 427.9998 0 TD (T)Tj 52.9998 0 TD 2.0005 Tc [(od)2000.5(a)]TJ 130.0005 0 TD 0 Tc (y)Tj 37 0 TD 27 Tc (o)Tj 90 0 TD 0 Tc (v)Tj 41.9995 0 TD 0.0005 Tc (er)Tj -1791.9995 100 TD -0.0002 Tc [()-26000.2(y)]TJ 152 0 TD 0 Tc [(ears)-24999.8(later)-27000(a)-26000(fast)-26999.8(w)]TJ 672 0 TD [(orkstation)-24999.8(with)-27000(hea)]TJ 705 0 TD [(vily)-26000(opti)]TJ -1529 99 TD [(mized)-30000(soft)]TJ 371.9998 0 TD (w)Tj 58 0 TD [(are)-28000.2(can)-30000(p)-2000(e)0.2(rform)-28999.8(o)]TJ 651 0 TD (v)Tj 42.0002 0 TD [(er)-27999.8()]TJ /T7 1 Tf 400 0 TD (crypt)Tj /T6 1 Tf 221.9995 0 TD 0.0003 Tc (op)Tj -1744.9995 100 TD 0 Tc [(erations)-24000.2(p)-1999.8(er)-25000(second )]TJ 754.9998 0 TD (A)Tj 60 0 TD (ttac)Tj 141.0002 0 TD (k)Tj 42 0 TD -0.0001 Tc [(ers)-23000.3(c)-0.1(an)-25000.3(no)]TJ 362 0 TD [(w)-25000.1(exp)-2000.1(edien)]TJ 401 0 TD 0 Tc (tly)Tj -1761 100 TD (disco)Tj 178.9998 0 TD (v)Tj 42.0002 0 TD [(er)-28000(plain)]TJ 275.9998 0 TD [(text)-30000(passw)]TJ 387 0 TD [(ords)-28000(b)]TJ 226.0002 0 TD [(y)-29000(h)0.2(ashing)-30000(en)]TJ 462 0 TD 0.0001 Tc [(tire)-28999.9(dic)]TJ -1572 99 TD 0 Tc [(tionaries)-30000(of)-31000(common)-31000(passw)]TJ 987 0 TD [(ords)-29000(and)-31000(comparing)-29999.5(the)]TJ -987 100 TD -0.0001 Tc [(results)-28000.3(to)-28000.1(en)]TJ 447.9998 0 TD 0 Tc [(tries)-27000(in)-27999.8(a)-28000.2(passw)]TJ 564.0002 0 TD [(ord)-25999.8(le )]TJ /T7 1 Tf 314.9998 0 TD 0.0001 Tc (crypt)Tj /T6 1 Tf 219.0002 0 TD 0 Tc (nonethe)Tj -1546 100 TD [(less)-25000.2(still)-25999.8(e)0(njo)]TJ 458.9998 0 TD [(ys)-25000.2(widespread)-24000(use)-26000(and)-25000.2(legacy)-25000.5(soft)]TJ 1232.9998 0 TD (w)Tj 58.0005 0 TD (are)Tj -1750 98.9999 TD (ev)Tj 78.9998 0 TD (en)Tj 115.0002 0 TD -0.0001 Tc (forces)Tj 239 0 TD 0 Tc (man)Tj 155 0 TD [(y)-31000(sites)]TJ 265.9998 0 TD 0.0002 Tc [(to)-31999.6(k)]TJ 148.0002 0 TD 0 Tc [(eep)-31999.8(their)]TJ 356 0 TD (passw)Tj 212 0 TD 0.0001 Tc [(ord)-29999.4(les)]TJ -1570 100 TD 0 Tc [(readable)-26000(b)]TJ 376 0 TD [(y)-27999.8(a)-0.2(ll)-27000(users )]TJ -376 199 TD (T)Tj 53 0 TD 1.9998 Tc [(od)1999.8(a)]TJ 130 0 TD 22 Tc (yw)Tj 124 0 TD 21.9998 Tc [(eh)21999.6(a)]TJ 145 0 TD 0 Tc (v)Tj 42 0 TD [(e)-21000(a)0(uthen)]TJ 305 0 TD -0.0001 Tc [(tication)-22000.3(sc)]TJ 366.9998 0 TD 0 Tc [(hemes)-22000.2(considerably)]TJ -1165.9998 100 TD [(more)-21999.8(sophisticated)-23000.2(than)-23000.2(the)-23000.2(UNIX)-24000(p)-0.2(assw)]TJ 1476.9998 0 TD [(ord)-21000(le )]TJ 307.0002 0 TD (In)Tj -1784 99 TD [(practice)-19999.8(ho)]TJ 415.9998 0 TD (w)Tj 58.0002 0 TD (ev)Tj 78.9998 0 TD [(er)-18000(implemen)]TJ 459.0002 0 TD [(tations)-19000.2(of)-18999.8(these)-19000(sc)]TJ 627 0 TD (hemes)Tj -1639 100 TD [(still)-22000.2(o)0.2(ften)-23000(dep)-1999.8(e)0(nd)-21999.8(on)-22000(users)-21000(remem)]TJ 1199 0 TD [(b)-2000(e)0.2(ring)-21000(secret)-21000(pass)]TJ -1199 100 TD (w)Tj 58 0 TD (ords )Tj 223 0 TD [(There)-30000(are)-29999.8(a)-0.2(lternativ)]TJ 736.9998 0 TD -0.0001 Tc [(es)-30999.9(s)-0.3(uc)]TJ 238.0002 0 TD 0.0001 Tc [(h)-29999.9(a)0.1(s)-30999.9(issuing)-29999.9(sp)-1999.4(e)]TJ -1256 99.0001 TD 0 Tc [(cial)-20000(authen)]TJ 391.9998 0 TD [(tication)-20000(hardw)]TJ 522.0002 0 TD [(are)-19000(to)-20000(users)-19999.8(o)-0.2(r)-20000(g)0.2(iving)-20000(them)]TJ -914 100 TD 0.0001 Tc (prin)Tj 146 0 TD 0 Tc [(ted)-17999.8(l)-0.2(ists)-18999.8(of)-18000.2(randomly)-18000(generated)-17000(access)-18000(co)-2000(des)-19000.5(but)]TJ -146 99.0001 TD -0.0001 Tc (these)Tj 225 0 TD 0 Tc (approac)Tj 286 0 TD (hes)Tj 153 0 TD (generally)Tj 364.9998 0 TD (incon)Tj 192 0 TD (v)Tj 42.0002 0 TD (enience)Tj 302 0 TD (users)Tj 221 0 TD (or)Tj -1786 100 TD [(incur)-30000(additional)-29999.8(cost )]TJ 821 0 TD (Th)Tj 104 0 TD [(us)-31000.2(p)0.2(assw)]TJ 345 0 TD [(ords)-28000(con)]TJ 305 0 TD -0.0003 Tc (tin)Tj 99 0 TD -0.0005 Tc [(ue)-29001(to)]TJ ET endstream endobj 3 0 obj << /ProcSet [/PDF /Text ] /Font << /T1 4 0 R /T2 5 0 R /T3 6 0 R /T4 7 0 R /T5 8 0 R /T6 9 0 R /T7 10 0 R >> /ExtGState << /GS1 11 0 R >> >> endobj 14 0 obj << /Length 21506 >> stream BT /T6 1 Tf 0.12 0 0 -0.12 72 723.9 Tm 0 g /GS1 gs -0.0001 Tc 0 Tw (pla)Tj 109 0 TD 0 Tc [(y)-26000.1(a)0.1(n)-25000.1(i)0.1(mp)-2000(ortan)]TJ 516.0001 0 TD [(t)-25999.9(role)-25999.9(i)0(n)-26000(the)-27000.1(v)]TJ 494.9999 0 TD [(ast)-25999.9(m)-0.1(a)-5000(jorit)]TJ 402.0001 0 TD -0.0001 Tc [(y)-24999.9(o)-0.1(f)-26000.1(u)-0.3(ser)]TJ -1522.0001 100 TD 0 Tc (authen)Tj 247.0001 0 TD [(tication)-27000(systems )]TJ -247.0001 199 TD 0.0001 Tc (This)Tj 202.9999 0 TD [(pap)-1999.8(er)]TJ 246.0001 0 TD 0 Tc (discusses)Tj 362 0 TD (w)Tj 58 0 TD (a)Tj 40 0 TD (ys)Tj 116 0 TD (of)Tj 108 0 TD (building)Tj 336.0001 0 TD (systems)Tj 322 0 TD -0.0002 Tc (in)Tj -1791.0001 100 TD 0.0001 Tc (whic)Tj 164.0001 0 TD 0 Tc (h)Tj 87.9999 0 TD (passw)Tj 212 0 TD (ord)Tj 162 0 TD (securit)Tj 239 0 TD (y)Tj 85.0001 0 TD (k)Tj 41.9999 0 TD (eeps)Tj 195.0001 0 TD -0.0001 Tc (up)Tj 133.9999 0 TD 0 Tc (with)Tj 204.0001 0 TD (hardw)Tj 225 0 TD (are)Tj -1750.0001 99 TD [(sp)-2000(eeds )]TJ 302 0 TD (W)Tj 78 0 TD 31 Tc [(ep)30999.9(r)31000.1(e)31000(s)30999.9(e)31000.1(n)]TJ 298.0001 0 TD 28.9999 Tc (tt)Tj 90.9999 0 TD 0 Tc (w)Tj 58 0 TD [(o)-30000.1(a)0.1(lgorithms)-29000(with)-31000(adaptable)]TJ -827 100 TD (cost)Tj /T7 1 Tf 227 0 TD (eksblow sh)Tj /T6 1 Tf 389 0 TD [()-22000(a)-18000(blo)-2000.1(c)]TJ 253 0 TD [(k)-19000(cipher)-19000(with)-20000(a)-18000(purp)-2000.2(osefully)]TJ -869 99 TD [(exp)-2000.1(ensiv)]TJ 310.0001 0 TD 32 Tc (ek)Tj 110.9999 0 TD 0 Tc (ey)Tj 114 0 TD (sc)Tj 68.0001 0 TD (hedule)Tj 291.9999 0 TD (and)Tj /T7 1 Tf 167.0001 0 TD (b)Tj 33.9999 0 TD (crypt)Tj /T6 1 Tf 183 0 TD ()Tj 58.0001 0 TD [(a)-32000(r)0.1(elated)]TJ 356 0 TD -0.0001 Tc (hash)Tj -1693.0001 100 TD 0 Tc (function )Tj 355.9999 0 TD (F)Tj 47 0 TD [(ailing)-24000(a)-24000(m)0(a)-5000(j)0(or)-22000(breakthrough)-23000(in)-24000(complex)]TJ -402.9999 100 TD 0.0001 Tc (it)Tj 53 0 TD 0 Tc [(y)-27000(theory)]TJ 298.0001 0 TD [()-27000(t)0.1(hese)-27000(algorithms)-26000.1(should)-27000.1(allo)]TJ 1064 0 TD 26 Tc [(wp)26000(a)26000.2(s)25999.8(s)26000(w)]TJ 298.0001 0 TD -0.0001 Tc (ord)Tj -1713.0001 99 TD 0 Tc [(based)-30000(s)-0.1(ystems)-30000(t)0(o)-30000(adapt)-30000(t)0.1(o)-30000(h)-0.1(ardw)]TJ 1216 0 TD [(are)-29000(impro)]TJ 352.0001 0 TD (v)Tj 42 0 TD -0.0001 Tc (emen)Tj 187 0 TD 0 Tc (ts)Tj -1797.0001 100 TD [(and)-26999.9(r)-0.1(emain)-27000.1(secure)-27000()-27000(y)]TJ 841 0 TD [(ears)-26000.1(in)]TJ 238 0 TD [(to)-27000(the)-28000(future )]TJ -1079 199 TD (The)Tj 181 0 TD (rest)Tj 173.0001 0 TD -0.0001 Tc (of)Tj 104.9999 0 TD 0 Tc (the)Tj 154 0 TD [(pap)-2000(er)]TJ 243.0001 0 TD -0.0001 Tc (is)Tj 94 0 TD 0 Tc (organized)Tj 384.9999 0 TD (as)Tj 112 0 TD (follo)Tj 153.0001 0 TD (ws )Tj 183.9998 0 TD (In)Tj -1783.9999 100 TD [(Section)-19999.9()0.1()-22000.1(w)]TJ 428 0 TD [(e)-19000(d)0(iscuss)-20000(related)-20000(w)]TJ 655 0 TD [(ork)-19000(on)-19000(passw)]TJ 456.9999 0 TD [(ord)-19000.2(secu)]TJ -1539.9999 98.9995 TD (rit)Tj 86 0 TD (y)Tj 37.0001 0 TD ( )Tj 57.9999 0 TD [(In)-25000.1(Section)-24000.1()-25000(w)]TJ 536 0 TD [(e)-24000.1(e)0.1(xplain)-23999.9(the)-24999.9(requiremen)]TJ 889.0001 0 TD 0.0001 Tc [(ts)-23999.7(for)-22999.9(a)]TJ -1606.0001 100 TD [(go)-1999.8(o)-1999.9(d)-26999.8(passw)]TJ 415 0 TD 0 Tc [(ord)-26000(sc)]TJ 215 0 TD (heme )Tj 250 0 TD [(Section)-28000()-28000(p)-0.1(resen)]TJ 590.9999 0 TD 0.0002 Tc (ts)Tj /T7 1 Tf 92.0002 0 TD 0 Tc (eksblow)Tj -1563.0001 100 TD ( sh)Tj /T6 1 Tf 123.0001 0 TD ()Tj 59 0 TD (a)Tj 75.9999 0 TD (bit)Tj 247 0 TD [(blo)-2000(c)]TJ 148.0001 0 TD (k)Tj 78 0 TD (cipher)Tj 256 0 TD (that)Tj 187 0 TD (lets)Tj 158.9999 0 TD (users)Tj 216.0001 0 TD 0.0001 Tc (tune)Tj 195.9998 0 TD (the)Tj -1744.9999 99 TD 0 Tc (cost)Tj 177 0 TD 0.0001 Tc (of)Tj 100.9999 0 TD 0 Tc (the)Tj 149.0001 0 TD (k)Tj 42.0001 0 TD -0.0001 Tc (ey)Tj 113.9999 0 TD 0 Tc (sc)Tj 68 0 TD (hedule )Tj 313 0 TD (Section)Tj 297.0001 0 TD ()Tj 76 0 TD -0.0001 Tc (in)Tj 66.9999 0 TD 0 Tc [(tro)-2000(duces)]TJ 340.9999 0 TD 0.0001 Tc (the)Tj -1744.9999 100.0005 TD 0 Tc (v)Tj 39.0001 0 TD (ariablecost)Tj /T7 1 Tf 443.9999 0 TD (b)Tj 34 0 TD (crypt)Tj /T6 1 Tf 219 0 TD (passw)Tj 212 0 TD [(ord)-26000(hashing)-28000(function)-28000(a)-0.2(nd)]TJ -948 100 TD [(describ)-2000.1(es)-30000(our)-30000(i)0(mplemen)]TJ 856.0001 0 TD [(tation)-31000(in)-31000(the)-31000(O)0(p)-2000(e)0(nBSD)-31000(op)]TJ -856.0001 98.9998 TD [(erating)-30000(system )]TJ 604 0 TD (Finally)Tj 248 0 TD [()-32000(Section)-30999.9()-31000.1(compares)]TJ /T7 1 Tf 791.0001 0 TD (b)Tj 33.9998 0 TD (crypt)Tj /T6 1 Tf -1676.9999 100 TD 0.0001 Tc [(to)-26999.9(t)]TJ 131 0 TD 0 Tc (w)Tj 58.0001 0 TD [(o)-26999.9(w)0(idelyused)-27000(passw)]TJ 730.9999 0 TD [(ord)-26000(h)0(ashing)-27000(functions )]TJ /T5 1 Tf -920 300.0002 TD ()Tj 168 0 TD (Related)Tj 415 0 TD (W)Tj 107 0 TD (ork)Tj /T6 1 Tf -690 234.9998 TD (P)Tj 55 0 TD 0.0001 Tc (assw)Tj 166 0 TD 0 Tc (ord)Tj 161.0001 0 TD (guessing)Tj 343.9999 0 TD (attac)Tj 183 0 TD (ks)Tj 118 0 TD 0.0001 Tc (can)Tj 168 0 TD 2.0001 Tc (be)Tj 128 0 TD 0 Tc (categorized)Tj 449.0001 0 TD (b)Tj 44 0 TD (y)Tj -1816.0001 99.0002 TD [(the)-30000.1(a)0.1(moun)]TJ 388.0001 0 TD 28.9999 Tc [(to)28999.8(f)-1000(i)28999.8(n)]TJ 224.9999 0 TD 0 Tc [(teraction)-29000(they)-30000(r)0.1(equire)-28000(with)-30000(an)-29999.8(au)]TJ -613 99.9998 TD (then)Tj 159 0 TD [(tication)-30000.1(system )]TJ 621 0 TD (In)Tj /T7 1 Tf 106 0 TD (online)Tj /T6 1 Tf 286 0 TD (attac)Tj 183.0001 0 TD [(ks)-29000(the)-30000(p)-1999.8(e)0(rp)-1999.8(e)]TJ -1355.0001 100 TD (trator)Tj 247.0001 0 TD (m)Tj 66.9999 0 TD (ust)Tj 145 0 TD (mak)Tj 153 0 TD (e)Tj 70 0 TD (use)Tj 150 0 TD (of)Tj 101 0 TD 0.0001 Tc (an)Tj 122.0001 0 TD 0 Tc (authen)Tj 246.9999 0 TD (tication)Tj 310.0001 0 TD (system)Tj -1612.0001 99.0002 TD 0.0001 Tc (to)Tj 109 0 TD 0 Tc (c)Tj 35.0001 0 TD -0.0001 Tc (hec)Tj 117.9999 0 TD 0 Tc (k)Tj 78 0 TD 0.0001 Tc (eac)Tj 114 0 TD 0 Tc (h)Tj 80 0 TD (guess)Tj 225.0001 0 TD -0.0001 Tc (of)Tj 101.9999 0 TD 0 Tc (a)Tj 77 0 TD (passw)Tj 212 0 TD (ord )Tj 201 0 TD (In)Tj /T7 1 Tf 112.0001 0 TD (oline)Tj /T6 1 Tf 295.9998 0 TD (at)Tj -1758.9999 100 TD (tac)Tj 109 0 TD (ks)Tj 139.0001 0 TD -0.0001 Tc (an)Tj 125 0 TD 0 Tc (attac)Tj 182.9999 0 TD (k)Tj 42 0 TD (er)Tj 106 0 TD (obtains)Tj 300 0 TD (informationsuc)Tj 620.0001 0 TD (h)Tj 83 0 TD (as)Tj 111 0 TD (a)Tj -1818.0001 99 TD (passw)Tj 212 0 TD [(ord)-26000(h)0(ashthat)-28000(allo)]TJ 705 0 TD [(ws)-27000.1(him)-27999.8(t)-0.1(o)-28000.1(c)]TJ 423 0 TD (hec)Tj 117.9999 0 TD -0.0001 Tc [(k)-27000.3(passw)]TJ 283 0 TD 0.0001 Tc (ord)Tj -1740.9999 100 TD 0 Tc (guesses)Tj 297.0001 0 TD -0.0001 Tc (on)Tj 123.9999 0 TD 0 Tc (his)Tj 139 0 TD (o)Tj 40.0001 0 TD (wn)Tj 167.9999 0 TD (with)Tj 198 0 TD 0.0001 Tc (no)Tj 125 0 TD 0 Tc (further)Tj 288 0 TD -0.0001 Tc (access)Tj 254.9999 0 TD 0 Tc (to)Tj 111 0 TD 0.0001 Tc (the)Tj -1744.9999 100 TD 0 Tc (system )Tj 320.0001 0 TD [(Online)-31000.1(attac)]TJ 481.9999 0 TD [(ks)-31000(are)-30000(generally)-31000(considerably)]TJ -802 99 TD (slo)Tj 96 0 TD (w)Tj 58.0001 0 TD (er)Tj 104.9999 0 TD 0.0001 Tc (than)Tj 204.0001 0 TD 0 Tc (oline)Tj 284 0 TD (ones )Tj 246 0 TD (Systems)Tj 331 0 TD -0.0001 Tc (can)Tj 162 0 TD 0 Tc (detect)Tj 258.9998 0 TD (on)Tj -1744.9999 100 TD [(line)-22999.9(attac)]TJ 335.0001 0 TD [(ks)-20999.9(fairly)-22000(easily)-20999.9(a)0(nd)-22000(defend)-22999.9(against)-20999.8(them)-23000(b)]TJ 1481 0 TD (y)Tj -1816.0001 100 TD (slo)Tj 96 0 TD [(wing)-28000.1(the)-28999.9(r)-0.1(ate)-28000(o)-0.1(f)-28999.9(p)-0.1(assw)]TJ 823 0 TD [(ord)-27000(c)]TJ 183 0 TD (hec)Tj 118 0 TD (king )Tj 218 0 TD [(In)-29000(con)]TJ 227.9999 0 TD (trast)Tj -1665.9999 98.9998 TD [(once)-25000.1(an)-24999.9(attac)]TJ 483 0 TD (k)Tj 42.0001 0 TD [(er)-23000(has)-23999.9(obtained)-24999.9(passw)]TJ 788.9999 0 TD [(ord)-22999.9(v)]TJ 186.0001 0 TD (erication)Tj -1500.0001 100.0001 TD [(information)-27999.9(the)-28000(only)-28000(p)0.1(rotection)-26999.9(a)-28000(system)-28000(has)-26999.8(f)0(rom)]TJ 0 99 TD [(oline)-20000(attac)]TJ 450.0001 0 TD [(ks)-20000(is)-21000(the)-21000(c)-0.1(omputational)-19000(cost)-21000.1(of)-20000(c)]TJ 1138 0 TD -0.0001 Tc (hec)Tj 118 0 TD 0 Tc (king)Tj -1706.0001 100 TD [(p)-2000.1(oten)]TJ 202.9999 0 TD [(tial)-28000.1(passw)]TJ 360.0001 0 TD (ords )Tj -563 199 TD (T)Tj 53 0 TD (ec)Tj 71.9999 0 TD [(hniques)-22000.1(for)-21000(mitigating)-21999.9(the)-23000(threat)-22000(of)-22000(oline)-22000.2(pass)]TJ -124.9999 100 TD (w)Tj 58 0 TD [(ord)-22000.1(g)0.1(uessing)-22000.1(generally)-21000(aspire)-23000(to)-23000(one)-22000(o)0(f)-23000(t)]TJ 1416.0001 0 TD (w)Tj 58 0 TD 23 Tc [(og)23000.2(o)22999.8(a)23000(l)23000.2(s)22999.8()]TJ -1532.0001 100 TD 0 Tc [(limiting)-30000(a)-29000.1(s)0.1(ystems)-29999.9(susceptibilit)]TJ 1148 0 TD [(y)-29000(t)0.1(o)-30000.1(o)-0.1(line)-28999.8(attac)]TJ 635.9999 0 TD (ks)Tj -1783.9999 99 TD [(or)-26000(increasing)-26000(their)-27000(computational)-25999.9(cost )]TJ 1438 0 TD [(As)-27000(a)-27000(simple)]TJ -1438 100 TD [(example)-21000.1(o)0.1(f)-21000.1(t)0.1(he)-21000(former)-21000(man)]TJ 981.0001 0 TD [(y)-20999.9(m)0(o)-2000(d)-0.1(ern)-21000(UNIX)-22000.2(systems)]TJ -981.0001 99 TD (no)Tj 86 0 TD (w)Tj 93.0001 0 TD (k)Tj 41.9999 0 TD 0.0001 Tc (eep)Tj 153 0 TD 0 Tc (passw)Tj 212 0 TD [(ord)-32000(hashes)]TJ 423 0 TD (secret)Tj 242 0 TD (from)Tj 203.0001 0 TD (users)Tj 239 0 TD -0.0001 Tc (stor)Tj -1693.0001 100 TD 0 Tc (ing)Tj 143 0 TD [(them)-32000(in)-31999.9(a)-31000(r)-0.1(eadprotected)]TJ /T7 1 Tf 948 0 TD (shadow)Tj /T6 1 Tf 300 0 TD (passw)Tj 211.9999 0 TD [(ord)-30000.2(le)]TJ -1602.9999 100 TD [(rather)-26999.9(than)-26999.9(in)-27999.9(the)-28000(standard)-27000.1(op)-2000(enly)-27000(readable)-27000.2(one )]TJ 0 199 TD (Muc)Tj 157.0001 0 TD (h)Tj 81.9999 0 TD (of)Tj 103 0 TD 0.0001 Tc (the)Tj 152.0001 0 TD 0 Tc (w)Tj 57.9999 0 TD (ork)Tj 153 0 TD 0.0001 Tc (on)Tj 124 0 TD 0 Tc (prev)Tj 158.0001 0 TD (en)Tj 81 0 TD (ting)Tj 177.9999 0 TD (oline)Tj 283.0001 0 TD -0.0001 Tc (passw)Tj 211.9998 0 TD 0.0001 Tc (ord)Tj 269.0002 -5317 TD -0.0001 Tc (attac)Tj 183 0 TD 0 Tc (ks)Tj 119.9998 0 TD (has)Tj 165 0 TD (cen)Tj 118.0002 0 TD (tered)Tj 228.9998 0 TD 0.0001 Tc (around)Tj 299.0002 0 TD (comm)Tj 214.9998 0 TD 0 Tc (unication)Tj 381.0002 0 TD (o)Tj 40 0 TD (v)Tj 41.9995 0 TD 0.0005 Tc (er)Tj -1791.9995 100 TD 0 Tc (insecure)Tj 327 0 TD -0.0001 Tc (net)Tj 113 0 TD 0 Tc (w)Tj 57.9998 0 TD 0.0001 Tc (orks )Tj 233.0002 0 TD 0 Tc (If)Tj 90.9998 0 TD (cryptographic)Tj 536.0002 0 TD [(proto)-1999.5(c)-0.5(ols)]TJ 366 0 TD -0.0001 Tc (rely)Tj -1724 99 TD -0.0002 Tc (on)Tj 124 0 TD 0 Tc (userc)Tj 211.9998 0 TD (hosen)Tj 239.0002 0 TD -0.0001 Tc (passw)Tj 212 0 TD 0 Tc (ords)Tj 188 0 TD -0.0002 Tc (as)Tj 111 0 TD 0 Tc (k)Tj 41.9998 0 TD (eys)Tj 175 0 TD -0.0001 Tc (they)Tj 195.0002 0 TD 0 Tc (ma)Tj 109 0 TD (y)Tj 80 0 TD [(op)-2000(en)]TJ -1687 100 TD (themselv)Tj 319 0 TD (es)Tj 109.9998 0 TD 0.0002 Tc (up)Tj 134.0002 0 TD 0 Tc (to)Tj 114 0 TD (oline)Tj 287.9998 0 TD 0.0001 Tc (guessing)Tj 342.0002 0 TD -0.0001 Tc (attac)Tj 183 0 TD 0 Tc (ks )Tj 176 0 TD -0.0002 Tc (Gong)Tj -1666 100 TD 0 Tc (et )Tj 127.9998 0 TD (al )Tj 124.0002 0 TD ( \015)Tj 63.9998 0 TD ()Tj 59.0002 0 TD (suggest)Tj 300 0 TD (sev)Tj 112 0 TD (eral)Tj 169 0 TD [(proto)-2000(c)0(ol)]TJ 333 0 TD (design)Tj 262 0 TD (tric)Tj 123 0 TD -0.0005 Tc (ks)Tj 112 0 TD (to)Tj -1786 99 TD 0 Tc (th)Tj 76 0 TD (w)Tj 58 0 TD [(art)-18000(passw)]TJ 337 0 TD [(ord)-16000(guessing)-18000(b)]TJ 500.9998 0 TD [(y)-18000(net)]TJ 175.0002 0 TD (w)Tj 57.9998 0 TD [(ork)-17000(a)-0.2(ttac)]TJ 319.0002 0 TD (k)Tj 42 0 TD -0.0002 Tc (ers )Tj 158 0 TD 0 Tc (Un)Tj -1724 100 TD (fortunately)Tj 395 0 TD [()-24999.8(t)-0.2(heir)-24000(most)-24000(in)]TJ 509.9998 0 TD [(teresting)-24000.2(p)0.2(rop)-2000.2(o)0.2(sals)-22000(require)]TJ -904.9998 99 TD [(encryption)-27000(a)0.2(lgorithms)-26000.2(with)-28000(un)]TJ 1102.9998 0 TD -0.0001 Tc [(usual)-27000.1(a)-0.1(nd)-28000.3(dicult)-28000.1(to)]TJ -1102.9998 100 TD -0.0002 Tc (ac)Tj 77 0 TD 0 Tc (hiev)Tj 148 0 TD [(e)-26000(p)0.2(rop)-2000.2(erties )]TJ -225 199 TD (Sev)Tj 125 0 TD [(eral)-30999.8(p)-2000.2(e)0(ople)-32000(ha)]TJ 516.9998 0 TD (v)Tj 42 0 TD [(e)-31000.2(d)0(esigned)]TJ 410.0002 0 TD (secure)Tj 255 0 TD (passw)Tj 212 0 TD [(ord)-30000(pro)]TJ -1561 100 TD [(to)-2000(cols)]TJ 250 0 TD 0.0001 Tc (that)Tj 190.9998 0 TD (let)Tj 132.0002 0 TD -0.0001 Tc (users)Tj 219.9998 0 TD 0 Tc (authen)Tj 247 0 TD (ticate)Tj 242.0002 0 TD (themselv)Tj 319 0 TD (es)Tj 109 0 TD (o)Tj 40 0 TD (v)Tj 41.9995 0 TD 0.0005 Tc (er)Tj -1791.9995 100 TD 0 Tc [(insecure)-25000(net)]TJ 429.9998 0 TD (w)Tj 58.0002 0 TD [(orks)-23000(without)-26000(the)-25000(need)-25000.2(to)-25000(remem)]TJ 1154.9995 0 TD 2.0005 Tc [(be)2000.5(r)-22999.5(o)2000.5(r)]TJ -1642.9995 99 TD 0 Tc [(certify)-28000(public)-30000(k)]TJ 552 0 TD -0.0001 Tc (eys )Tj 175 0 TD 0 Tc (Bello)Tj 181.9998 0 TD [(vin)-28000(a)0.2(nd)-28000(Merritt)-29000.2( )0.5()]TJ 662.0002 0 TD 29 Tc [()29000()1000()29000(r)29000.5(s)28999.5(t)]TJ -1571 100 TD 0 Tc [(prop)-2000(osed)]TJ 369 0 TD -0.0001 Tc (the)Tj 158 0 TD 0 Tc (idea)Tj 218 0 TD (giving)Tj 262 0 TD (sev)Tj 112 0 TD (eral)Tj 176 0 TD (concrete)Tj 343 0 TD (proto)Tj -1638 98.9995 TD [(cols)-24000(putativ)]TJ 421.9998 0 TD [(ely)-24000(resistan)]TJ 405.0002 0 TD [(t)-24000(t)0.2(o)-24000.2(o)0(line)-25000(g)-0.2(uessing)-23000(attac)]TJ 934 0 TD (ks )Tj -1761 100 TD (P)Tj 54.9998 0 TD (atel)Tj 166.0002 0 TD -0.0001 Tc ( )Tj 106 0 TD 0 Tc ()Tj 56.9998 0 TD (later)Tj 199.0002 0 TD (cryptanalyzed)Tj 541 0 TD -0.0001 Tc (those)Tj 223 0 TD 0 Tc [(proto)-2000(cols)]TJ 388 0 TD (but)Tj -1735 100 TD [(p)-1999.8(e)0(ople)-25000(ha)]TJ 344 0 TD (v)Tj 41.9998 0 TD [(e)-23000.2(s)0.2(ince)-24000.2(con)]TJ 383.0002 0 TD (tin)Tj 98.9998 0 TD 0.0001 Tc [(ued)-24999.9(d)0.3(ev)]TJ 279.0002 0 TD 0 Tc [(eloping)-22999.8(and)-25000(rening)]TJ -1147 99 TD [(others)-22000(in)-23000.2(the)-24000(same)-21999.8(v)]TJ 721 0 TD (ein )Tj 163.9998 0 TD 0.0001 Tc [(More)-21999.9(recen)]TJ 398.0002 0 TD 0 Tc [(t)-22000(p)0(rop)-2000(osals)-21000(suc)]TJ 531 0 TD (h)Tj -1814 100.0005 TD [(as)-27000.2(SRP)-26999.8( )0()]TJ 399 0 TD 28 Tc [(s)28000(h)28000.2(o)]TJ 170 0 TD 0 Tc [(w)-27000(p)0(romise)-26999.8(of)-27000(b)-2000(e)0(ing)-27999.8(secure )]TJ -569 198.9998 TD [(Of)-25999.8(course)-24999.8(ev)]TJ 471 0 TD [(en)-24999.8(a)-26000(secure)-25000(passw)]TJ 636 0 TD [(ord)-23999.8(proto)-2000.2(col)-24000(requires)]TJ -1107 100 TD [(some)-25000(serv)]TJ 351 0 TD [(er)-23000(capable)-25000(o)0(f)-25000(v)]TJ 522 0 TD [(alidating)-24999.8(u)-0.2(sers)-25000.2(with)-25000(correct)]TJ -873 99 TD -0.0001 Tc (passw)Tj 212 0 TD (ords )Tj 235.9998 0 TD 0 Tc (An)Tj 144 0 TD (attac)Tj 183.0002 0 TD (k)Tj 41.9998 0 TD (er)Tj 104 0 TD 0.0001 Tc (who)Tj 183 0 TD 0 Tc (obtains)Tj 299 0 TD 0.0001 Tc (that)Tj 188.0002 0 TD -0.0002 Tc (serv)Tj 145 0 TD 0 Tc (ers)Tj -1736 100 TD (secret)Tj 241.9998 0 TD (state)Tj 209.0002 0 TD -0.0001 Tc (can)Tj 157.9998 0 TD (moun)Tj 201 0 TD 0 Tc (t)Tj 65.0002 0 TD -0.0002 Tc (an)Tj 120.9998 0 TD 0 Tc (oline)Tj 281 0 TD [(guessing)-32000(attac)]TJ 516.9998 0 TD 0.0005 Tc (k )Tj -1793.9995 100 TD 0 Tc (Because)Tj 333 0 TD (secure)Tj 263.9998 0 TD 0.0001 Tc (passw)Tj 212 0 TD 0 Tc (ord)Tj 162 0 TD 0.0001 Tc [(proto)-1999.7(c)0.1(ols)]TJ 373.0002 0 TD 0 Tc (require)Tj 295 0 TD (public)Tj -1639 99 TD (k)Tj 41.9998 0 TD (ey)Tj 117.0002 0 TD (cryptograph)Tj 441 0 TD (y)Tj 78.9998 0 TD 0.0002 Tc ( )Tj 64 0 TD 0 Tc ()Tj 86 0 TD 0.0001 Tc (they)Tj 196.0002 0 TD -0.0002 Tc (do)Tj 124 0 TD 0 Tc (ha)Tj 86 0 TD (v)Tj 41.9998 0 TD (e)Tj 73.0002 0 TD (a)Tj 78.9998 0 TD (tunable)Tj 309.0002 0 TD (k)Tj 41.9995 0 TD (ey)Tj -1779.9995 100 TD (length)Tj 271.9998 0 TD (parameter )Tj 483 0 TD (Ho)Tj 102.0002 0 TD (w)Tj 57.9998 0 TD 0.0002 Tc (ev)Tj 79.0002 0 TD 0 Tc (er)Tj 142 0 TD (this)Tj 178.9998 0 TD (parameter)Tj 416.0002 0 TD (pri)Tj -1731 100 TD (marily)Tj 275 0 TD -0.0001 Tc (con)Tj 122.9998 0 TD 0 Tc (trols)Tj 203.0002 0 TD -0.0001 Tc (the)Tj 157.9998 0 TD 0 Tc (dicult)Tj 274.0002 0 TD (y)Tj 86 0 TD (of)Tj 108.9998 0 TD 0.0001 Tc (moun)Tj 201 0 TD -0.0002 Tc (ting)Tj 184.0002 0 TD 0 Tc (oline)Tj -1613 99 TD -0.0001 Tc (attac)Tj 183 0 TD 0 Tc (ks)Tj 112 0 TD (without)Tj 318 0 TD (a)Tj 77.9998 0 TD 0.0001 Tc (serv)Tj 145.0002 0 TD -0.0001 Tc (ers)Tj 159.9998 0 TD 0 Tc (secret)Tj 245 0 TD (state)Tj 239 0 TD (it)Tj 92.0002 0 TD (only)Tj 191 0 TD (in)Tj -1763 100 TD (directly)Tj 309.9998 0 TD (aects)Tj 264.0002 0 TD (the)Tj 150 0 TD 0.0001 Tc (cost)Tj 178.9998 0 TD 0.0002 Tc (of)Tj 102 0 TD (an)Tj 123 0 TD 0 Tc (oline)Tj 282.0002 0 TD (attac)Tj 182.9995 0 TD (k)Tj 78 0 TD 0.0003 Tc (giv)Tj 107.0005 0 TD 0 Tc (en)Tj -1778 99.0002 TD [(that)-27999.8(state )]TJ 415.9998 0 TD (T)Tj 53.0002 0 TD [(uning)-28000.2(k)]TJ 272.9998 0 TD [(ey)-27000.2(length)-28000(to)-26999.8(preserv)]TJ 724 0 TD [(e)-26000(passw)]TJ 275.0002 0 TD (ord)Tj -1741 100 TD [(guessing)-30000.2(c)0(osts)-31000(w)]TJ 598 0 TD -0.0001 Tc [(ould)-31000.3(ha)]TJ 273.9998 0 TD 0 Tc (v)Tj 42.0002 0 TD [(e)-31000(o)0(ther)-30999.8(unin)]TJ 448 0 TD [(tended)-32000(conse)]TJ -1362 100 TD (quences)Tj 340 0 TD (for)Tj 135 0 TD (instance)Tj 331 0 TD (increasing)Tj 395.9998 0 TD (message)Tj 326.0002 0 TD (sizes)Tj 198 0 TD (and)Tj -1726 99 TD [(costing)-29999.8(serv)]TJ 429.9998 0 TD [(ers)-29000(u)0(nnecessary)-29000(computation )]TJ 1121.0002 0 TD [(By)-31000(com)]TJ -1551 100 TD [(bining)-24000(a)-23999.8(s)-0.2(c)]TJ 383.9998 0 TD [(heme)-23999.8(l)-0.2(ik)]TJ 301 0 TD 0.0001 Tc [(e)-24000.1(S)0.3(RP)-23999.9(with)-24999.9(the)]TJ /T7 1 Tf 575.0002 0 TD 0 Tc (b)Tj 34 0 TD (crypt)Tj /T6 1 Tf 215 0 TD -0.0001 Tc (algorithm)Tj -1509 100 TD (presen)Tj 229.9998 0 TD [(ted)-30000.1(i)0.1(n)-31000.3(t)-0.1(his)-30999.9(p)-0.3(ap)-2000.3(er)-31000.1(ho)]TJ 756.0002 0 TD 0 Tc (w)Tj 58 0 TD -0.0002 Tc (ev)Tj 79 0 TD -0.0001 Tc [(er)-30000.1(o)-0.3(ne)-30000.1(can)-31000.1(v)]TJ 473 0 TD [(ary)-30000.1(t)-0.6(he)]TJ -1596 99 TD 0 Tc [(cost)-21000(of)-21999.8(guessing)-21000(passw)]TJ 789 0 TD [(ords)-19000.2(i)0.2(ndep)-2000(enden)]TJ 583 0 TD [(tly)-23000.2(from)-21000(most)]TJ -1372 100 TD [(other)-26999.8(p)-0.2(rop)-1999.8(erties)-27000(of)-27000(the)-28000.2(p)0.2(roto)-1999.8(col )]TJ 0 198.9999 TD (Whatev)Tj 284 0 TD [(er)-29999.8(progress)-28000(o)-1999.8(ccurs)-29000(in)-31000(prev)]TJ 943.9998 0 TD (en)Tj 81.0002 0 TD [(ting)-29000(oline)-31000(at)]TJ -1309 100 TD -0.0001 Tc (tac)Tj 109 0 TD [(ks)-25000.3(o)-0.1(ne)-25000.1(can)-25999.9(n)-0.3(ev)]TJ 550.9998 0 TD 0 Tc [(er)-24000(rule)-26000(them)-26000(out)-25000.2(en)]TJ 695 0 TD (tirely)Tj 185.0002 0 TD ( )Tj 59 0 TD [(In)-26000(fact)]TJ -1599 99 TD -0.0001 Tc (the)Tj 152 0 TD (decision)Tj 323 0 TD 0 Tc (to)Tj 111 0 TD (ha)Tj 85.9998 0 TD (v)Tj 42.0002 0 TD (e)Tj 73 0 TD -0.0002 Tc (an)Tj 124 0 TD 0 Tc [(op)-2000.2(enly)]TJ 277 0 TD (readable)Tj 341 0 TD (passw)Tj 212 0 TD (ord)Tj -1741 100 TD (le)Tj 140 0 TD (w)Tj 57.9998 0 TD 0.0001 Tc [(as)-31999.7(not)]TJ 261 0 TD 0.0002 Tc (an)Tj 121 0 TD 0 Tc (o)Tj 40.0002 0 TD (v)Tj 42 0 TD (ersigh)Tj 212 0 TD 31 Tc [(to)31000.2(n)]TJ 184.9998 0 TD 0.0001 Tc (the)Tj 149.0002 0 TD -0.0001 Tc (part)Tj 186 0 TD 0 Tc (of)Tj 100 0 TD (the)Tj 148.9995 0 TD 0.0002 Tc (UNIX)Tj -1642.9995 100 TD 0 Tc (system)Tj 283 0 TD (designers)Tj 363 0 TD -0.0001 Tc ( \012 )Tj 169.9998 0 TD 0 Tc (Rather)Tj 310.0002 0 TD (it)Tj 90.9998 0 TD (w)Tj 58.0002 0 TD -0.0002 Tc (as)Tj 109 0 TD 0 Tc (a)Tj 76 0 TD (reaction)Tj 326 0 TD -0.0005 Tc (to)Tj -1786 99 TD -0.0001 Tc (the)Tj 147.9998 0 TD 0 Tc (dicult)Tj 274 0 TD 31.9999 Tc [(yo)31999.7(fk)]TJ 217.0002 0 TD -0.0001 Tc [(eeping)-31000.3(t)-0.1(he)]TJ 410 0 TD (passw)Tj 212 0 TD 0 Tc [(ord)-30000()0.2(le)-32000(secret)-32000(in)]TJ -1261 100 TD [(previous)-24999.8(systems)-25000.2(and)-25999.8(to)-24999.8(the)-26000(r)0.2(ealization)-24000.2(that)-26000(a)-25000(sup)]TJ 0 99.0001 TD 1.9998 Tc [(po)1999.6(s)2000(e)1999.8(d)1999.6(l)2000(y)]TJ 315 0 TD 0 Tc (secret)Tj 250.9998 0 TD 0.0001 Tc (passw)Tj 212 0 TD 0 Tc (ord)Tj 161.0002 0 TD (le)Tj 149 0 TD (w)Tj 57.9998 0 TD 0.0001 Tc (ould)Tj 199.0002 0 TD -0.0001 Tc (need)Tj 208 0 TD 0 Tc (to)Tj 116.9995 0 TD 0.0002 Tc (resist)Tj -1669.9995 100 TD 0 Tc (oline)Tj 283 0 TD (guessing)Tj 336 0 TD (an)Tj 85.9998 0 TD 0.0002 Tc (yw)Tj 102.0002 0 TD 0 Tc (a)Tj 39.9998 0 TD (y)Tj 37 0 TD ( )Tj 82 0 TD 0.0001 Tc (This)Tj 198.0002 0 TD 0 Tc (realization)Tj 414 0 TD (remains)Tj -1578 99.9998 TD (equally)Tj 292.9998 0 TD -0.0001 Tc (true)Tj 183.0002 0 TD 0 Tc [(to)-2000(da)]TJ 162 0 TD (y)Tj 37 0 TD ( )Tj 82 0 TD -0.0001 Tc (Aside)Tj 237 0 TD 0 Tc (from)Tj 203 0 TD (the)Tj 151 0 TD -0.0002 Tc (ob)Tj 86 0 TD -0.0001 Tc (vious)Tj 222 0 TD 0 Tc (issues)Tj -1656 99.0001 TD -0.0001 Tc [(of)-29000.3(bac)]TJ 219 0 TD 0 Tc [(kup)-28000(tap)-1999.8(e)-29000.2(s)0.2(ecurit)]TJ 590.9998 0 TD (y)Tj 37 0 TD 0.0001 Tc [()-29000.1(a)0.3(ttac)]TJ 235.0002 0 TD 0 Tc (k)Tj 42 0 TD [(ers)-26999.8(who)-27999.8(compromise)]TJ -1124 99.9999 TD [(UNIX)-32000(mac)]TJ 394 0 TD [(hines)-30999.8(routinely)]TJ 574 0 TD -0.0001 Tc (mak)Tj 152.9998 0 TD 30.0002 Tc [(eo)30000.4()]TJ 189.0002 0 TD 0.0001 Tc [(with)-31999.9(the)-31999.9(list)-31999.4(of)]TJ -1310 100 TD 0 Tc [(hashed)-27000.2(passw)]TJ 489 0 TD [(ords)-26000(whether)-27000(s)0.2(hado)]TJ 727.9998 0 TD (w)Tj 58.0002 0 TD [(ed)-26000(or)-27000(not )]TJ ET endstream endobj 15 0 obj << /ProcSet [/PDF /Text ] /Font << /T5 8 0 R /T6 9 0 R /T7 10 0 R >> /ExtGState << /GS1 11 0 R >> >> endobj 17 0 obj << /Length 21401 >> stream BT /T6 1 Tf 0.12 0 0 -0.12 72 723.9 Tm 0 g /GS1 gs 0 Tc 0 Tw [(A)-31000(p)-2000.1(o)-2000(o)0.1(r)-29000(h)-0.1(ashing)-30000(algorithm)-29000(not)-29999.9(o)-0.1(nly)-29000.1(complicates)-30000(re)]TJ 0 100 TD (co)Tj 77 0 TD (v)Tj 42.0001 0 TD [(ery)-30000(f)0(rom)-31000(b)0.1(reakins)]TJ 731.0001 0 TD -0.0001 Tc (it)Tj 87 0 TD 0 Tc [(also)-31000(endangers)-30000(other)-32000(ma)]TJ -937.0001 99 TD (c)Tj 35.0001 0 TD (hines )Tj 259 0 TD (P)Tj 54.9999 0 TD [(eople)-30999.9(often)]TJ 431 0 TD (c)Tj 35 0 TD [(ho)-2000.1(ose)-30999.9(t)-0.1(he)]TJ 381 0 TD [(same)-31999.9(passw)]TJ 424.9999 0 TD [(ord)-30000.2(o)0.2(n)]TJ -1620.9999 100 TD (m)Tj 67.0001 0 TD (ultiple)Tj 262.9999 0 TD 0.0001 Tc (mac)Tj 146 0 TD 0 Tc (hines )Tj 260 0 TD (Man)Tj 162 0 TD (y)Tj 77.0001 0 TD [(sites)-32000(i)0(n)]TJ 256.9999 0 TD (ten)Tj 113 0 TD [(tionally)-32000(main)]TJ -1345 100 TD [(tain)-28000.1(iden)]TJ 321 0 TD [(tical)-27000(passw)]TJ 396 0 TD [(ord)-25000(les)-28000.1(on)-27000(all)-27000(mac)]TJ 689 0 TD [(hines)-27000.2(for)-26999.8(ad)]TJ -1406 99 TD (ministrativ)Tj 398.0001 0 TD (e)Tj 71.0001 0 TD -0.0001 Tc (con)Tj 122.9999 0 TD 0 Tc (v)Tj 42 0 TD (enience )Tj 345 0 TD (While)Tj 248.9999 0 TD (shado)Tj 207.0001 0 TD (w)Tj 94.0001 0 TD -0.0001 Tc (passw)Tj 211.9998 0 TD 0.0001 Tc (ord)Tj -1740.9999 100 TD 0 Tc (les)Tj 171.9999 0 TD (certainly)Tj 350.0002 0 TD -0.0001 Tc (do)Tj 120.9999 0 TD 0.0001 Tc (not)Tj 154.0001 0 TD 0 Tc (h)Tj 43.9999 0 TD (urt)Tj 144 0 TD (securit)Tj 239.0001 0 TD (y)Tj 37 0 TD ()Tj 57.9999 0 TD (the)Tj 149.0001 0 TD (big)Tj 144 0 TD -0.0002 Tc (a)Tj 86 0 TD 0 Tc (w)Tj 93 0 TD -0.0002 Tc (in)Tj -1791.0001 99 TD 0 Tc [(UNIX)-32000(p)0(assw)]TJ 460 0 TD [(ord)-30000(securit)]TJ 390.0001 0 TD [(y)-31000(i)0.1(s)-31000.1(n)0.1(ot)-32000(its)-31999.9(o)-0.1(p)-2000.1(enly)-31000(readable)]TJ -850.0001 100 TD (passw)Tj 212 0 TD (ord)Tj 160.0001 0 TD -0.0001 Tc (le )Tj 204.9999 0 TD 0 Tc (Rather)Tj 318 0 TD 0.0001 Tc (it)Tj 96 0 TD 0 Tc (is)Tj 97 0 TD (the)Tj 156 0 TD (c)Tj 35 0 TD (hoice)Tj 225.0001 0 TD -0.0002 Tc (of)Tj 107 0 TD 0 Tc (a)Tj 82 0 TD -0.0001 Tc (hash)Tj -1693.0001 100 TD 0 Tc [(function)-23999.9(t)0.1(hat)-24000(cannot)-23000(adapt)-23999.9(t)-0.1(o)-23000(a)-23000()0()-22000(fold)-23000(increase)]TJ 0 99 TD [(in)-29999.9(the)-30000.1(sp)-1999.9(eed)-30000.1(o)0.1(f)-29000(hardw)]TJ 796 0 TD [(are)-28000(and)-29000(s)0.1(oft)]TJ 433 0 TD (w)Tj 58.0001 0 TD (are )Tj 176 0 TD [(This)-30000(pap)-2000(e)0.2(r)]TJ -1463.0001 100 TD (presen)Tj 230 0 TD (ts)Tj 99.0001 0 TD -0.0001 Tc (sc)Tj 68 0 TD 0 Tc (hemes)Tj 256.0001 0 TD -0.0001 Tc (that)Tj 186.9999 0 TD 0 Tc (can)Tj 159.0001 0 TD (adapt)Tj 241.9999 0 TD (to)Tj 109 0 TD (suc)Tj 113.9999 0 TD (h)Tj 80.0002 0 TD -0.0001 Tc (impro)Tj 211 0 TD 0 Tc (v)Tj 42 0 TD -0.0002 Tc (e)Tj -1797.0001 100 TD 0 Tc (men)Tj 149.9999 0 TD [(ts)-27999.9(in)-26999.9(eciency)]TJ 512.0001 0 TD ( )Tj -662 199 TD (Others)Tj 289 0 TD 0.0001 Tc (ha)Tj 86.0001 0 TD 0 Tc (v)Tj 41.9999 0 TD (e)Tj 81 0 TD (already)Tj 309 0 TD [(prop)-2000(osed)]TJ 370.9999 0 TD (n)Tj 44.0001 0 TD (umerous)Tj 348.9999 0 TD 0.0002 Tc (sc)Tj 68 0 TD 0 Tc (hemes)Tj -1638.9999 98.9995 TD 0.0001 Tc (to)Tj 117.0001 0 TD 0 Tc (increase)Tj 330.0001 0 TD (the)Tj 159 0 TD (cost)Tj 185.9999 0 TD 0.0001 Tc (of)Tj 111 0 TD 0 Tc (guessing)Tj 344 0 TD (passw)Tj 212.0001 0 TD (ords )Tj 258 0 TD (The)Tj -1717.0001 100 TD (F)Tj 46.9999 0 TD [(reeBSD)-23000.1(o)0.1(p)-2000(e)-0.1(rating)-22000(system)-24000(for)-23000(i)0.2(nstance)-23000(in)]TJ 1492 0 TD [(tro)-2000(d)0(uced)]TJ -1538.9999 100 TD [(a)-23000(r)-0.1(eplacemen)]TJ 470 0 TD 22 Tc [(tf)22000(o)21999.9(r)]TJ /T7 1 Tf 177.0001 0 TD 0 Tc (crypt)Tj /T6 1 Tf 213.9999 0 TD [(based)-23000(o)-0.1(n)-21999.9(t)-0.1(he)-24000.1(MD)-22999.8( )0()]TJ 786.0001 0 TD -0.0001 Tc [()-23000.1(mes)]TJ -1647.0001 99 TD 0 Tc (sage)Tj 188.0001 0 TD (digest)Tj 248.9999 0 TD (algorithm )Tj 435 0 TD (MD)Tj /T7 1 Tf 217 0 TD (crypt)Tj /T6 1 Tf 227 0 TD (tak)Tj 116 0 TD (es)Tj 104.0001 0 TD (consider)Tj -1536.0001 100.0005 TD [(ably)-22000(longer)-21000(to)-23000(compute)-22000(than)-23000(the)-23000(original)]TJ /T7 1 Tf 1470.9999 0 TD (crypt)Tj /T6 1 Tf 183.0002 0 TD ( )Tj 58 0 TD (Y)Tj 55 0 TD (et)Tj -1767.0001 100 TD 0.0001 Tc (it)Tj 88.0001 0 TD 0 Tc (still)Tj 167.9999 0 TD 0.0001 Tc [(has)-31999.8(a)]TJ 228 0 TD 0 Tc (xed)Tj 206 0 TD (cost)Tj 177 0 TD 0.0001 Tc (and)Tj 167 0 TD 0 Tc (th)Tj 76 0 TD 0.0001 Tc (us)Tj 112 0 TD 0 Tc [(cannot)-32000(not)]TJ 429.9999 0 TD (adapt)Tj -1651.9999 98.9998 TD [(to)-30000(faster)-29999.9(hardw)]TJ 561 0 TD (are )Tj 177 0 TD [(As)-30999.9(time)-31000.1(passes)-28999.9(M)0(D)]TJ /T7 1 Tf 806.0001 0 TD (crypt)Tj /T6 1 Tf 220.9998 0 TD (of)Tj -1764.9999 100 TD (fers)Tj 168 0 TD (steadily)Tj 321 0 TD (decreasing)Tj 415 0 TD (protection)Tj 410 0 TD (against)Tj 299.0001 0 TD (oline)Tj -1613.0001 99 TD [(guessing)-27000(attac)]TJ 512 0 TD (ks )Tj 137 0 TD (Signican)Tj 349 0 TD [(t)-28000(optimizations)-27999.8(ha)]TJ 664.0001 0 TD (v)Tj 42 0 TD 27 Tc [(ea)27000(l)27000.2()]TJ -1704.0001 100 TD 0 Tc (ready)Tj 244.0001 0 TD [(b)-2000(een)]TJ 210.9999 0 TD (found)Tj 249 0 TD (to)Tj 116 0 TD 0.0001 Tc [(sp)-1999.8(eed)]TJ 244 0 TD 0 Tc (up)Tj 136 0 TD (the)Tj 158 0 TD (calculation)Tj 435.0001 0 TD (of)Tj -1793.0001 100 TD 0.0001 Tc (MD)Tj /T7 1 Tf 209 0 TD 0 Tc (crypt)Tj /T6 1 Tf 183 0 TD ( )Tj -392 199 TD [(Abadi)-30999.9(et )-31000(al )-30999.9( )0()]TJ 556 0 TD [()-31000(p)-0.1(rop)-1999.9(ose)-30000(strengthening)-29999.9(u)0.2(serc)]TJ 1101.9999 0 TD 0.0001 Tc (hosen)Tj -1657.9999 100 TD 0 Tc (passw)Tj 212 0 TD [(ords)-30000(b)]TJ 228 0 TD (y)Tj 77 0 TD [(app)-2000.1(ending)]TJ 408.0001 0 TD [(random)-32000(bits)]TJ 476.9999 0 TD [(to)-31999.8(them )]TJ 366.0001 0 TD (A)Tj 59.9998 0 TD (t)Tj -1827.9999 99 TD (authen)Tj 247.0001 0 TD (tication)Tj 309.9999 0 TD (time)Tj 219 0 TD (soft)Tj 130.0001 0 TD (w)Tj 57.9999 0 TD [(are)-32000(u)0(ses)]TJ 326 0 TD 0.0001 Tc (the)Tj 149 0 TD 0 Tc (kno)Tj 130.0001 0 TD (wn)Tj 138.9998 0 TD 0.0001 Tc (part)Tj -1707.9999 100 TD 0 Tc [(of)-29999.9(the)-30000.1(p)0(assw)]TJ 454 0 TD [(ord)-28000.1(and)-30000(a)-30000(hash)-29000(of)-30000(the)-31000(full)-30000(passw)]TJ 1183.0001 0 TD [(ord)-28000(to)]TJ -1637.0001 99.0002 TD (guess)Tj 231 0 TD (the)Tj 156 0 TD (random)Tj 318 0 TD (bits )Tj 234 0 TD (As)Tj 136 0 TD (hardw)Tj 225 0 TD (are)Tj 151.0001 0 TD (gets)Tj 185 0 TD (faster)Tj -1636.0001 100 TD 0.0001 Tc (one)Tj 170.0001 0 TD -0.0001 Tc (can)Tj 171 0 TD 0 Tc (easily)Tj 245.9999 0 TD (tune)Tj 208 0 TD (this)Tj 180.0001 0 TD -0.0001 Tc (tec)Tj 103.9999 0 TD 0 Tc (hnique)Tj 287 0 TD (b)Tj 44 0 TD (y)Tj 90.0001 0 TD (increasing)Tj -1500.0001 100 TD (the)Tj 154.0001 0 TD (n)Tj 44 0 TD (um)Tj 112.9999 0 TD 2 Tc [(be)2000(r)]TJ 155.0001 0 TD -0.0001 Tc (of)Tj 104.9999 0 TD 0 Tc (random)Tj 316.0001 0 TD (bits )Tj 225 0 TD (Unfortunately)Tj 502.9998 0 TD ()Tj 64.0002 0 TD -0.0001 Tc (pass)Tj -1679.0001 99 TD 0 Tc (w)Tj 58 0 TD (ord)Tj 176 0 TD (strengthening)Tj 551 0 TD (inheren)Tj 266 0 TD 0.0001 Tc (tly)Tj 155.0001 0 TD -0.0001 Tc (giv)Tj 106.9999 0 TD 0 Tc (es)Tj 125 0 TD (unauthen)Tj 338.9999 0 TD (ti)Tj -1776.9999 100 TD (cated)Tj 234 0 TD (users)Tj 222 0 TD (the)Tj 156 0 TD (abilit)Tj 187 0 TD (y)Tj 85 0 TD (to)Tj 114 0 TD (moun)Tj 201.0001 0 TD (t)Tj 72.9999 0 TD (oline)Tj 286.9999 0 TD (guessing)Tj -1558.9999 100 TD (attac)Tj 183 0 TD 0.0001 Tc (ks )Tj 169 0 TD 0 Tc (Th)Tj 104 0 TD (us)Tj 143 0 TD 0.0001 Tc (it)Tj 94 0 TD 0 Tc (cannot)Tj 283 0 TD 2.0001 Tc (be)Tj 124 0 TD 0 Tc (com)Tj 146 0 TD (bined)Tj 236.0001 0 TD 0.0001 Tc (with)Tj 200 0 TD -0.0001 Tc (tec)Tj 104 0 TD -0.0002 Tc (h)Tj -1786.0001 99 TD 0 Tc [(niques)-20999.9(lik)]TJ 338.0001 0 TD [(e)-22000(S)0.1(RP)-21000(that)-22000.1(attempt)-22000.1(t)0.1(o)-21000(l)-0.1(imit)-22000.1(the)-21999.8(p)-2000(ossibilit)]TJ 1478 0 TD (y)Tj -1816.0001 100 TD [(of)-28000(oline)-27000.1(attac)]TJ 552 0 TD [(ks)-26000(in)-27999.9(the)-28000()0(rst)-28000(p)0(lace )]TJ -552 198.9999 TD (Finally)Tj 248.0001 0 TD 23 Tc [(m)23000(a)23000.1(n)]TJ 200.9999 0 TD 0 Tc [(y)-21000(s)-0.1(ystems)-22000(rely)-21000.1(less)-21999.9(directly)-21000(on)-22000.2(passw)]TJ 1291.9999 0 TD 0.0001 Tc (ord)Tj -1740.9999 100 TD 0 Tc (securit)Tj 239 0 TD (y)Tj 82 0 TD 0.0001 Tc (for)Tj 139 0 TD 0 Tc (authen)Tj 247 0 TD (tication )Tj 372 0 TD (The)Tj 182.0001 0 TD [(p)-1999.8(o)-0.1(pular)]TJ 319 0 TD -0.0001 Tc (ssh)Tj 151 0 TD ( \015)Tj 106 0 TD 0 Tc ()Tj -1837.0001 99 TD [(remote)-29999.9(login)-28999.9(program)-29000(for)-30000.1(example)-30000(allo)]TJ 1453.0001 0 TD [(ws)-29000(users)-29000(t)0(o)]TJ -1453.0001 100 TD (authen)Tj 247.0001 0 TD [(ticate)-22999.9(themselv)]TJ 544.9999 0 TD [(es)-23000(using)-23000(R)0(SA)-23999.9(encryption )]TJ 943.0001 0 TD -0.0001 Tc (Ssh)Tj -1735.0001 100 TD 0 Tc (serv)Tj 145.0001 0 TD -0.0001 Tc [(ers)-22000.2(m)]TJ 191.9999 0 TD 0.0001 Tc [(ust)-22999.8(h)0.1(a)]TJ 220 0 TD 0 Tc (v)Tj 42 0 TD [(e)-23000(a)-23000(u)0(sers)-23000(RSA)-24000(public)-24000(k)]TJ 833 0 TD (ey)Tj 74.0001 0 TD [()-23999.8(b)-0.2(ut)-24000(they)]TJ -1506.0001 99 TD (need)Tj 199 0 TD (not)Tj 153 0 TD [(store)-32000(an)]TJ 295.0001 0 TD [(y)-31999.9(information)-31999.9(with)]TJ 724.9999 0 TD (whic)Tj 164.0001 0 TD (h)Tj 78.9998 0 TD 0.0002 Tc [(to)-31999.6(v)]TJ 148.0002 0 TD -0.0001 Tc (er)Tj -1763.0001 100 TD 0 Tc [(ify)-31999.9(u)-0.1(serc)]TJ 336 0 TD [(hosen)-29000(p)0.1(assw)]TJ 445.0001 0 TD (ords )Tj 222.9999 0 TD [(The)-30999.9(catc)]TJ 320.0001 0 TD [(h)-30999.9(i)-0.1(s)-32000(of)-31000(course)]TJ -1324.0001 99.0001 TD [(that)-25999.9(users)-25000.1(m)]TJ 452 0 TD [(ust)-25000(store)-24999.9(t)-0.1(heir)-25000(priv)]TJ 675 0 TD [(ate)-26000(k)]TJ 179 0 TD [(eys)-23999.9(s)0.2(omewhere)]TJ -1306 100 TD 0.0001 Tc (and)Tj 170.0001 0 TD -0.0001 Tc (this)Tj 169.9999 0 TD 0 Tc (usually)Tj 293 0 TD (means)Tj 263 0 TD (on)Tj 124 0 TD (disk)Tj 207 0 TD (encrypted)Tj 393.9999 0 TD 0.0001 Tc (with)Tj 197.0002 0 TD 0 Tc (a)Tj -1818.0001 99.9998 TD (passw)Tj 212 0 TD (ord )Tj 227 0 TD (W)Tj 78 0 TD (orse)Tj 187 0 TD (y)Tj 42 0 TD (et)Tj 140 0 TD (ssh)Tj 155 0 TD (uses)Tj 192 0 TD (simple)Tj 274.0001 0 TD (DES)Tj 279 0 TD (to)Tj -1786.0001 99.0001 TD (encrypt)Tj 312 0 TD (priv)Tj 141 0 TD (ate)Tj 148 0 TD (k)Tj 42 0 TD (eys)Tj 176 0 TD 0.0001 Tc (making)Tj 302 0 TD (the)Tj 153.0001 0 TD 0 Tc (cost)Tj 181 0 TD (of)Tj 103.9998 0 TD (guessing)Tj -1558.9999 99.9999 TD 0.0001 Tc [(ssh)-25999.9(p)0.2(assw)]TJ 350.0001 0 TD 0 Tc [(ords)-25000(comparable)-25000(to)-26000.1(the)-26999.9(cost)-26999.9(of)-25999.8(computing)]TJ /T7 1 Tf -350.0001 100 TD (crypt)Tj /T6 1 Tf 183 0 TD ( )Tj 85 0 TD (Nonetheless)Tj 489 0 TD [(b)-2000(ecause)]TJ 315 0 TD (of)Tj 103 0 TD 0.0001 Tc (its)Tj 124.0001 0 TD 0 Tc (exibilit)Tj 295 0 TD (y)Tj 37 0 TD ()Tj 62 0 TD -0.0001 Tc (sshs)Tj -1693.0001 99.0001 TD 0.0001 Tc (RSA)Tj 202 0 TD 0 Tc (authen)Tj 247 0 TD [(tication)-32000(is)-31999.9(a)-32000(g)-0.1(enerally)-31000.1(b)-2000(etter)]TJ 1081.0001 0 TD (approac)Tj 286 0 TD (h)Tj 194 -5280 TD 0.0001 Tc (than)Tj 201 0 TD 0 Tc (sc)Tj 68 0 TD (hemes)Tj 256 0 TD (more)Tj 214.9998 0 TD (closely)Tj 272.0002 0 TD -0.0001 Tc (tied)Tj 173 0 TD -0.0002 Tc (to)Tj 109 0 TD 0 Tc (passw)Tj 212 0 TD (ords )Tj 233 0 TD (F)Tj 47 0 TD (or)Tj -1786 100 TD [(example)-28000.2(w)0.2(ithout)-28000(mo)-2000(difying)-28000.2(the)-27999.8(c)0(ore)-27000(p)-0.2(roto)-2000(cols)-26000(ssh)]TJ 0 99 TD -0.0001 Tc (could)Tj 226 0 TD 0 Tc [(easily)-32000(emplo)]TJ 449 0 TD 32 Tc [(yt)32000(h)32000.2(e)]TJ /T7 1 Tf 224 0 TD 0 Tc (eksblow sh)Tj /T6 1 Tf 429.9998 0 TD [(algorithm)-31000(pro)]TJ -1328.9998 100 TD [(p)-1999.8(o)-0.2(sed)-22000(i)-0.2(n)-22000(t)0(his)-22000(pap)-2000(er)-21000(to)-22000.2(impro)]TJ 1008.9998 0 TD (v)Tj 42.0002 0 TD [(e)-20000(t)0.2(he)-22000(securit)]TJ 433 0 TD 0.0001 Tc [(y)-20999.9(o)0.1(f)-21999.9(s)0.6(tored)]TJ -1484 100 TD 0 Tc [(secret)-26999.8(k)]TJ 277.9998 0 TD (eys )Tj /T5 1 Tf -277.9998 315 TD ()Tj 167.9998 0 TD (Design)Tj 473 0 TD (criteria)Tj 494.0002 0 TD (for)Tj 278 0 TD (passw)Tj 281.9995 0 TD 0.0003 Tc (ord)Tj -1526.9998 116 TD 0.0002 Tc (sc)Tj 91.0002 0 TD 0 Tc (hemes)Tj /T6 1 Tf -259 249 TD (An)Tj 106 0 TD [(y)-22999.8(a)-0.2(lgorithm)-21999.8(t)0(hat)-23000(t)0(ak)]TJ 732 0 TD [(es)-21999.8(a)-23000.2(u)0.2(serc)]TJ 369 0 TD [(hosen)-21000.2(p)0.2(assw)]TJ 437 0 TD -0.0003 Tc [(ord)-21000.8(a)-0.3(s)]TJ -1644 100 TD -0.0001 Tc (input)Tj 227.9998 0 TD 0 Tc (should)Tj 270 0 TD 2.0002 Tc (be)Tj 120 0 TD 0 Tc (hardened)Tj 366 0 TD (against)Tj 293 0 TD 0.0001 Tc (passw)Tj 212.0002 0 TD 0 Tc [(ord)-32000(guess)]TJ -1489 100 TD -0.0001 Tc (ing )Tj 202.9998 0 TD 0.0001 Tc (That)Tj 218.0002 0 TD -0.0001 Tc (means)Tj 265 0 TD -0.0002 Tc (an)Tj 85.9998 0 TD 0 Tc (y)Tj 82 0 TD (public)Tj 260.0002 0 TD (or)Tj 112.9998 0 TD (longliv)Tj 269.0002 0 TD (ed)Tj 120 0 TD (output)Tj -1616 99 TD [(should)-22000(b)-2000(e)-22999.8(of)-21999.8(minimal)-21999.8(u)0(se)-21999.8(in)-23000(reconstructing)-21000(the)-22000(pass)]TJ 0 100 TD (w)Tj 58 0 TD -0.0001 Tc (ord )Tj 193 0 TD (Sev)Tj 125 0 TD 0 Tc [(eral)-30999.8(design)-32000(criteria)-30999.8(can)]TJ 873 0 TD -0.0001 Tc [(help)-32000.1(a)-0.3(c)]TJ 261 0 TD 0 Tc (hiev)Tj 148 0 TD [(e)-31000(this)]TJ -1658 99 TD (goal )Tj 0 200 TD (Ideally)Tj 238 0 TD ()Tj 63 0 TD (one)Tj 163 0 TD (w)Tj 57.9998 0 TD 0.0001 Tc (ould)Tj 195 0 TD (lik)Tj 88 0 TD 0 Tc (e)Tj 74 0 TD (an)Tj 86 0 TD (y)Tj 82.0002 0 TD (passw)Tj 211.9998 0 TD 0.0001 Tc (ord)Tj 157 0 TD 0 Tc (handling)Tj 351.9998 0 TD 0.0003 Tc (al)Tj -1767.9995 99 TD 0 Tc (gorithm)Tj 333 0 TD (to)Tj 119.9998 0 TD 2.0002 Tc (be)Tj 133.0002 0 TD 0 Tc (a)Tj 88 0 TD (strong)Tj 272.9998 0 TD (onew)Tj 211.0002 0 TD (a)Tj 40 0 TD (y)Tj 89 0 TD (function)Tj 344 0 TD (of)Tj 113.9995 0 TD 0.0003 Tc (the)Tj -1744.9995 100 TD -0.0001 Tc (passw)Tj 212 0 TD 0 Tc [(ordthat)-19000(is)-22000.2(g)0.2(iv)]TJ 583 0 TD [(en)-20000(the)-20999.8(a)-0.2(lgorithms)-19000(output)-21000(and)]TJ -795 100 TD [(other)-31999.8(i)-0.2(nputs)]TJ 504.9998 0 TD (an)Tj 120.0002 0 TD (attac)Tj 183 0 TD (k)Tj 42 0 TD [(er)-30000(should)]TJ 369 0 TD -0.0002 Tc (ha)Tj 85.9998 0 TD 0 Tc (v)Tj 42.0002 0 TD [(e)-30999.8(l)-0.2(ittle)]TJ 270.9995 0 TD (c)Tj 35.0005 0 TD (hance)Tj -1653 99 TD -0.0002 Tc (of)Tj 102 0 TD 0 Tc (learning)Tj 326.9998 0 TD (ev)Tj 79.0002 0 TD (en)Tj 118 0 TD (partial)Tj 276 0 TD (information)Tj 457 0 TD (she)Tj 152 0 TD (could)Tj 229 0 TD (not)Tj -1740 100 TD [(already)-24000(h)-0.2(a)]TJ 377 0 TD (v)Tj 42 0 TD [(e)-25000(g)0.2(uessed)-24000(ab)-2000(out)-25999.8(the)-26000.2(p)0.2(assw)]TJ 948.9998 0 TD (ord )Tj 178.0002 0 TD (Unfortu)Tj -1546 99 TD (nately)Tj 216.9998 0 TD 0.0001 Tc [()-20999.9(o)0.1(new)]TJ 255 0 TD 0 Tc (a)Tj 40.0002 0 TD [(y)-17000(functions)-18999.8(are)-18000.2(dened)-18999.8(asymptotically)]TJ -512 100 TD [(with)-23000(resp)-1999.8(ect)-23000.2(to)-23000(their)-22999.8(input)-23000(l)-0.2(engthsan)-23000.2(a)0.2(ttac)]TJ 1607 0 TD (k)Tj 42 0 TD [(er)-21000(has)]TJ -1649 100 TD (negligible)Tj 377.9998 0 TD (probabilit)Tj 354.0002 0 TD (y)Tj 79 0 TD -0.0002 Tc (of)Tj 103 0 TD 0 Tc (in)Tj 67 0 TD (v)Tj 42 0 TD (erting)Tj 247.9998 0 TD (a)Tj 78.0002 0 TD (onew)Tj 211 0 TD (a)Tj 40 0 TD (y)Tj 78 0 TD 0.0001 Tc (func)Tj -1678 99 TD -0.0001 Tc (tion)Tj 184 0 TD 0 Tc (on)Tj 128 0 TD (sucien)Tj 289 0 TD (tly)Tj 139.9998 0 TD (large)Tj 216.0002 0 TD (inputs)Tj 293 0 TD -0.0001 Tc (but)Tj 165.9998 0 TD 0 Tc (exactly)Tj 299.0002 0 TD (ho)Tj 86 0 TD (w)Tj -1801 100 TD (large)Tj 209.9998 0 TD 0.0001 Tc [(dep)-1999.9(e)0.1(nds)]TJ 328.0002 0 TD -0.0002 Tc (on)Tj 121.9998 0 TD 0.0001 Tc (the)Tj 150 0 TD (attac)Tj 183.0002 0 TD 0 Tc (k)Tj 42 0 TD -0.0001 Tc (er )Tj 148.9998 0 TD 0 Tc (Because)Tj 325.0002 0 TD (there)Tj 219 0 TD (is)Tj 89.9995 0 TD (a)Tj -1817.9995 100 TD (xed)Tj 209.9998 0 TD (limit)Tj 207 0 TD 0.0002 Tc (to)Tj 111 0 TD 0.0001 Tc (the)Tj 152 0 TD (size)Tj 167 0 TD 0.0002 Tc (of)Tj 104.0002 0 TD -0.0001 Tc (passw)Tj 212 0 TD (ords)Tj 188 0 TD 0 Tc (users)Tj 218 0 TD (will)Tj 166 0 TD (tol)Tj -1735 98.9998 TD [(erate)-29000(w)]TJ 290.9998 0 TD [(e)-28000.2(need)-29000(a)-28999.8(dieren)]TJ 599 0 TD [(t)-29000.2(c)0(riterion)-28000(f)0(or)-28000.2(functions)-29000(on)]TJ -889.9998 100.0002 TD -0.0001 Tc (passw)Tj 212 0 TD (ords )Tj -212 198.9998 TD 0 Tc (Informally)Tj 370 0 TD 31 Tc (w)Tj 112 0 TD 30 Tc (ew)Tj 125 0 TD 0 Tc [(ould)-30000.2(l)0.2(ik)]TJ 275 0 TD 0.0001 Tc [(e)-29999.9(a)-29999.7(passw)]TJ 351 0 TD -0.0001 Tc [(ord)-29000.1(sc)]TJ 218 0 TD 0.0002 Tc [(heme)-29999.3(to)-30999.8(b)-1999.8(e)]TJ -1451 100 TD 0 Tc [(as)-30999.8(g)-0.2(o)-2000(o)-1999.8(d)]TJ 356 0 TD -0.0002 Tc (as)Tj 107 0 TD -0.0001 Tc (the)Tj 148 0 TD (passw)Tj 212 0 TD 0 Tc [(ords)-30000(users)-31999.8(c)]TJ 433 0 TD [(ho)-2000(ose )]TJ 317 0 TD (Giv)Tj 130 0 TD [(en)-31999.5(a)]TJ -1703 99 TD (probabilit)Tj 353.9998 0 TD [(y)-30000(d)-0.2(istribution)]TJ /T8 1 Tf 530 0 TD (D)Tj /T6 1 Tf 102.0002 0 TD [(on)-30000(passw)]TJ 329.9998 0 TD 0.0001 Tc [(ords)-28999.9(w)]TJ 263.9998 0 TD [(e)-31000.4(d)0.6(ene)]TJ -1579.9995 100 TD -0.0001 Tc (the)Tj /T7 1 Tf 140 0 TD 0 Tc (pr)Tj 73 0 TD (e)Tj 33.9998 0 TD (dictability)Tj /T8 1 Tf 386.0002 0 TD (R)Tj /T6 1 Tf 63.9998 0 TD ()Tj /T8 1 Tf 32 0 TD (D)Tj /T6 1 Tf 71.0002 0 TD [()-25000(o)0(f)-24000(t)0.2(he)-24000(distribution)-25000(t)0(o)-24000(b)-2000(e)-24999.5(t)-0.5(he)]TJ -800 100 TD (highest)Tj 292.9998 0 TD (probabilit)Tj 354 0 TD (y)Tj 78.0002 0 TD (Pr)Tj 89 0 TD ()Tj /T8 1 Tf 32 0 TD (s)Tj /T6 1 Tf 38.9998 0 TD ()Tj 67.0002 0 TD (of)Tj 101.9998 0 TD (an)Tj 86 0 TD (y)Tj 77 0 TD (single)Tj 238 0 TD (passw)Tj 211.9998 0 TD (ord)Tj /T8 1 Tf 154.0005 0 TD (s)Tj /T6 1 Tf -1821 99 TD -0.0002 Tc (in)Tj /T8 1 Tf 96.9998 0 TD 0 Tc (D)Tj /T6 1 Tf 71 0 TD ()Tj /T8 1 Tf 61 0 TD (R)Tj /T6 1 Tf 64 0 TD ()Tj /T8 1 Tf 32.0002 0 TD (D)Tj /T6 1 Tf 71 0 TD 24 Tc [()1000(m)24000.2(a)23999.8(x)]TJ /T9 1 Tf 299 12.0002 TD 0 Tc (s)Tj /T10 1 Tf 31 0 TD ( )Tj /T9 1 Tf 45 0 TD (D)Tj /T6 1 Tf 74 -12.0002 TD (Pr)Tj 88.9998 0 TD ()Tj /T8 1 Tf 32 0 TD (s)Tj /T6 1 Tf 39 0 TD 0.0002 Tc ( )Tj 94.0002 0 TD 0 Tc [(A)-28000(function)-29000.2(of)-28000(a)-27000(p)0(ass)]TJ -1099 100 TD (w)Tj 58 0 TD [(ord)-18999.8(is)-21000(secure)-18999.8(if)-21000(an)-21000.2(attac)]TJ 819.9998 0 TD (k)Tj 42.0002 0 TD [(ers)-18000(probabilit)]TJ 497.9998 0 TD -0.0001 Tc [(y)-20000.3(o)-0.1(f)-20000.1(learning)]TJ -1417.9998 99.0002 TD -0.0002 Tc (an)Tj 85.9998 0 TD 0 Tc [(y)-29000.2(p)0.2(artial)-28999.8(i)-0.2(nformation)-29000(ab)-1999.8(out)-30000(t)0(he)-29999.8(passw)]TJ 1392 0 TD [(ord)-28000(is)-29000(pro)]TJ -1477.9998 99.9999 TD [(p)-1999.8(o)-0.2(rtional)-21999.8(t)0(o)-23000.2(t)0(he)-23000.2(pro)-2000.2(d)0(uct)-23000.2(o)0(f)-22999.8(t)0(he)-23000(w)]TJ 1181 0 TD [(ork)-20999.8(she)-23000(i)0.2(n)]TJ 346 0 TD (v)Tj 42 0 TD 0.0001 Tc [(ests)-22000.4(a)0.6(nd)]TJ -1569 100 TD 0 Tc [(the)-28000(p)-0.2(redictabilit)]TJ 583.9998 0 TD -0.0001 Tc [(y)-27000.1(o)-0.1(f)-28000.3(t)-0.1(he)-28000.3(passw)]TJ 521 0 TD 0 Tc [(ord)-25000.2(distribution )]TJ -1104.9998 199 TD [(What)-30000(do)-2000(es)-30000(it)-31000.2(mean)-30000(for)-29000(a)0(n)-30000(a)0(ttac)]TJ 1164.9998 0 TD (k)Tj 42.0002 0 TD [(er)-29000(to)-30000(learn)-29000(partial)]TJ -1207 100 TD [(information)-18999.8(a)0(b)-2000.2(out)-19000(a)-19000(p)0.2(assw)]TJ 944 0 TD -0.0001 Tc (ord)Tj 193 0 TD 0 Tc (W)Tj 77.9998 0 TD [(e)-20000.2(d)0.2(ene)-19000(partial)-19000.5(in)]TJ -1214.9998 99 TD [(formation)-22000(t)0(o)-22999.8(b)-2000.2(e)-23000(t)0(he)-24000.2(v)]TJ 758.9998 0 TD [(alue)-22999.8(of)-23000.2(an)]TJ 347 0 TD [(y)-22000.2(s)0.2(inglebit)-23000(predicate)]TJ -1105.9998 100 TD [(on)-27000.2(a)-26000(p)0.2(assw)]TJ 395 0 TD -0.0001 Tc (ord )Tj 179 0 TD -0.0002 Tc (In)Tj 74 0 TD 0 Tc [(teresting)-26000.2(p)0(redicates)-27000(o)0(n)-26000(passw)]TJ 1060 0 TD (ords)Tj -1708 99 TD 0.0001 Tc (migh)Tj 177.9998 0 TD -0.0001 Tc [(t)-23000.3(include)-23000.3(t)-0.1(he)-24000.1(rst)-23000.3(bit)-23000.1(o)-0.1(f)-22999.9(a)-23000.3(passw)]TJ 1133.0002 0 TD 0 Tc [(ord)-21999.8(or)-22000(the)-23000(par)]TJ -1311 100 TD -0.0002 Tc (it)Tj 53 0 TD 0 Tc (y)Tj 78 0 TD -0.0002 Tc (of)Tj 102 0 TD -0.0001 Tc (bits)Tj 168 0 TD 0 Tc (in)Tj 103.9998 0 TD (a)Tj 76.0002 0 TD -0.0001 Tc (passw)Tj 211.9998 0 TD 0.0001 Tc (ord )Tj 199 0 TD 0 Tc (An)Tj 143.0002 0 TD (attac)Tj 182.9998 0 TD (k)Tj 42.0002 0 TD (er)Tj 103 0 TD (can)Tj 159 0 TD (alw)Tj 122.9995 0 TD (a)Tj 40.0005 0 TD (ys)Tj -1785 100.0001 TD [(guess)-30999.8(certain)-30999.8(p)-0.2(redicates)-30000(with)-31999.8(high)]TJ 1281 0 TD -0.0001 Tc (probabilit)Tj 354 0 TD 0 Tc (yfor)Tj -1635 98.9998 TD (instance)Tj 357 0 TD -0.0001 Tc (the)Tj 151 0 TD 0 Tc (trivial)Tj 256 0 TD (predicate)Tj /T8 1 Tf 368 0 TD (P)Tj /T6 1 Tf 65 0 TD ()Tj /T8 1 Tf 31.9998 0 TD (s)Tj /T6 1 Tf 39 0 TD ()Tj 70.0002 0 TD ()Tj 101 0 TD ()Tj 78 0 TD (whic)Tj 164 0 TD (h)Tj 82 0 TD (re)Tj -1763 100.0002 TD [(turns)-22000()-21000(on)-22000(all)-22000(p)0.2(assw)]TJ 707 0 TD [(ords )-31999.8(If)-23000.2(a)-21000(f)0(unction)-22999.8(o)-0.2(f)-21999.8(a)-21000(passw)]TJ 1034 0 TD (ord)Tj -1741 100 TD [(is)-30000(secure)-31000(h)0.2(o)]TJ 449 0 TD (w)Tj 58 0 TD (ev)Tj 79 0 TD [(er)-29000(its)-30000(output)-31000(should)-30000(not)-30999.5(l)-0.5(et)-30000(an)-31000(at)]TJ ET endstream endobj 18 0 obj << /ProcSet [/PDF /Text ] /Font << /T5 8 0 R /T6 9 0 R /T7 10 0 R /T8 19 0 R /T9 20 0 R /T10 21 0 R >> /ExtGState << /GS1 11 0 R >> >> endobj 23 0 obj << /Length 24320 >> stream BT /T6 1 Tf 0.12 0 0 -0.12 72 723.9 Tm 0 g /GS1 gs 0 Tc 0 Tw (tac)Tj 109 0 TD (k)Tj 42.0001 0 TD [(er)-21000(guess)-20999.9(a)0(n)]TJ 388.9999 0 TD [(y)-21000(predicate)-22000(more)-21000.1(accurately)-21000(than)-22000.2(she)]TJ -540 100 TD [(could)-26999.9(h)-0.1(a)]TJ 307.0001 0 TD (v)Tj 41.9999 0 TD [(e)-27000.1(w)0.1(ithout)-28000.1(the)-27999.9(functions)-28000(output )]TJ -349 199 TD [(More)-29000(formally)]TJ 511 0 TD [()-29000(let)]TJ /T8 1 Tf 173 0 TD (F)Tj /T6 1 Tf 65 0 TD ()Tj /T8 1 Tf 32.0001 0 TD -0.0001 Tc [(s )-14000.1(t)]TJ /T6 1 Tf 106 0 TD 0 Tc [()-30000(b)-1999.8(e)-30000.1(a)-29000(function )]TJ 610.9998 0 TD [(The)-29999.8(a)-0.2(rgu)]TJ -1497.9999 100 TD (men)Tj 149.9999 0 TD (t)Tj /T8 1 Tf 69.0001 0 TD (s)Tj /T6 1 Tf 75 0 TD (represen)Tj 300.0001 0 TD -0.0001 Tc (ts)Tj 100 0 TD 0 Tc (a)Tj 78 0 TD (users)Tj 240.9999 0 TD (secret)Tj 244 0 TD (passw)Tj 212.0001 0 TD -0.0001 Tc (ord)Tj 181 0 TD 0 Tc (whic)Tj 163.9998 0 TD (h)Tj -1813.9999 99 TD (will)Tj 171 0 TD 2.0001 Tc (be)Tj 128 0 TD 0 Tc (dra)Tj 119 0 TD (wn)Tj 147 0 TD (from)Tj 211 0 TD (a)Tj 84 0 TD (probabilit)Tj 354 0 TD (y)Tj 85.0001 0 TD (distribution)Tj /T8 1 Tf 466.9998 0 TD (D)Tj /T6 1 Tf 71.0002 0 TD ( )Tj -1837.0001 100 TD [(The)-19000(a)-0.1(rgumen)]TJ 475.0001 0 TD (t)Tj /T8 1 Tf 50.9999 0 TD (t)Tj /T6 1 Tf 49.0001 0 TD (represen)Tj 300 0 TD [(ts)-18000(an)]TJ 168.9999 0 TD [(y)-19000(a)-0.1(dditional)-18000(n)0(onsecret)]TJ -1044 99 TD (inputs)Tj /T8 1 Tf 257.0001 0 TD (F)Tj /T6 1 Tf 95.9999 0 TD (migh)Tj 178.0001 0 TD 30 Tc [(tt)29999.9(a)30000.1(k)]TJ 178 0 TD 0 Tc (e )Tj 105 0 TD [(Let)-31000(the)-31000.1(v)]TJ 337 0 TD [(alues)-30000(o)0.1(f)]TJ /T8 1 Tf 309.0001 0 TD (t)Tj /T6 1 Tf 59.9998 0 TD -0.0001 Tc [(b)-2000.3(e)-31000.1(dra)]TJ 235.0002 0 TD -0.0002 Tc (wn)Tj -1755.0001 100 TD 0 Tc [(from)-26000.1(a)-26000(probabilit)]TJ 617 0 TD [(y)-25000(distribution)]TJ /T8 1 Tf 521 0 TD (T)Tj /T6 1 Tf 61.0001 0 TD ( )Tj 57.9999 0 TD (W)Tj 78 0 TD [(e)-27000.1(m)0(o)-2000(d)0.2(el)-26000.2(an)-26999.8(at)]TJ -1335 100 TD (tac)Tj 109 0 TD (k)Tj 42.0001 0 TD (er)Tj 109 0 TD -0.0001 Tc (as)Tj 116 0 TD 0 Tc (a)Tj 82.9999 0 TD (randomized)Tj 461 0 TD [(b)-2000.1(o)-2000(olean)]TJ 322 0 TD (circuit)Tj /T11 1 Tf 230.9999 -30 TD ( )Tj /T6 1 Tf 37.0002 30 TD ()Tj /T8 1 Tf 67.9998 0 TD (A)Tj /T6 1 Tf 62 0 TD ()Tj 68 0 TD -0.0001 Tc (that)Tj -1707.9999 99 TD 0 Tc (tries)Tj 207.0001 0 TD -0.0001 Tc (to)Tj 122.9999 0 TD 0 Tc (guess)Tj 239.0001 0 TD (a)Tj 90.9999 0 TD (predicate)Tj /T8 1 Tf 382 0 TD (P)Tj /T6 1 Tf 114.0001 0 TD -0.0001 Tc [(ab)-2000.1(out)]TJ 258.9999 0 TD 0 Tc (a)Tj 91.0001 0 TD (passw)Tj 212 0 TD -0.0001 Tc (ord )Tj -1718.0001 100 TD 0 Tc (The)Tj 189.0001 0 TD (cost)Tj 187.9999 0 TD 0.0001 Tc (of)Tj 113 0 TD 0 Tc (an)Tj 133 0 TD (attac)Tj 183.0001 0 TD (kor)Tj 245.9999 0 TD 0.0001 Tc (the)Tj 160.0001 0 TD 0 Tc (w)Tj 57.9999 0 TD (ork)Tj 163 0 TD (in)Tj 67.0001 0 TD (v)Tj 42 0 TD (ested)Tj 230 0 TD (b)Tj 44 0 TD (y)Tj -1816.0001 100 TD 0.0001 Tc (an)Tj 137 0 TD 0 Tc (attac)Tj 183.0001 0 TD (k)Tj 41.9999 0 TD (eris)Tj 256 0 TD (the)Tj 165 0 TD (n)Tj 44 0 TD (um)Tj 113 0 TD 2 Tc [(be)2000(r)]TJ 167 0 TD 0.0001 Tc (of)Tj 116 0 TD 0 Tc (gates)Tj 234.0001 0 TD (in)Tj 118 0 TD -0.0001 Tc (the)Tj 164.9998 0 TD (cir)Tj -1739.9999 99 TD 0 Tc (cuit)Tj 206 0 TD 0.0001 Tc (whic)Tj 164.0001 0 TD 0 Tc (h)Tj 87.9999 0 TD (w)Tj 58.0001 0 TD (e)Tj 78 0 TD (denote)Tj /T12 1 Tf 281 0 TD (j)Tj /T8 1 Tf 22.9999 0 TD (A)Tj /T12 1 Tf 62 0 TD (j)Tj /T6 1 Tf 23 0 TD ( )Tj 102 0 TD (W)Tj 78 0 TD (e)Tj 79 0 TD (use)Tj 157.0001 0 TD -0.0002 Tc (the)Tj 157 0 TD 0 Tc (notation)Tj -1556.0001 100 TD 0.0001 Tc (Pr)Tj 89.0001 0 TD 0 Tc ( )Tj /T8 1 Tf 22.9999 0 TD (v)Tj /T11 1 Tf 40 11.9995 TD ( )Tj /T12 1 Tf 61.0001 -11.9995 TD ( )Tj /T8 1 Tf 106 0 TD (S)Tj /T11 1 Tf 51 11.9995 TD ( )Tj /T8 1 Tf 37.9999 -11.9995 TD ( )Tj 55.0001 0 TD (v)Tj /T11 1 Tf 40 11.9995 TD ()Tj /T12 1 Tf 60.9999 -11.9995 TD ( )Tj /T8 1 Tf 106 0 TD (S)Tj /T11 1 Tf 51 11.9995 TD ()Tj /T8 1 Tf 37 -11.9995 TD ( )Tj 56 0 TD 14 Tc ()Tj /T6 1 Tf 124 0 TD 0 Tc ()Tj /T8 1 Tf 56 0 TD (B)Tj /T6 1 Tf 67 0 TD -0.0001 Tc [()-28000.2(t)0(o)-28000.1(denote)-27000.1(t)-0.1(he)-29000.3(proba)]TJ -1061 98.9995 TD 0 Tc (bilit)Tj 145.0001 0 TD [(y)-30000(o)0.1(f)-30000.1(statemen)]TJ 496.9999 0 TD (t)Tj /T8 1 Tf 62 0 TD (B)Tj /T6 1 Tf 97 0 TD [(after)-30000(an)-29000(exp)-2000(erimen)]TJ 687.9999 0 TD [(t)-30000(i)-0.2(n)-30000(whic)]TJ 325 0 TD (h)Tj -1813.9999 100 TD (v)Tj 39.0001 0 TD (ariables)Tj /T8 1 Tf 306.9999 0 TD (v)Tj /T11 1 Tf 40 12 TD ( )Tj /T8 1 Tf 37.0001 -12 TD 13.9999 Tc ( v)Tj /T11 1 Tf 77.0001 12 TD 0 Tc ()Tj /T8 1 Tf 37.9999 -12 TD 14 Tc ( )Tj /T6 1 Tf 176 0 TD -0.0001 Tc [(are)-28000.1(d)-0.2(ra)]TJ 259 0 TD 0 Tc [(wn)-28000(from)-29000.1(probabilit)]TJ 685.9999 0 TD 27.0002 Tc [(yd)27000.4(i)27000(s)27000.4()]TJ -1658.9999 100 TD 0 Tc (tributions)Tj /T8 1 Tf 385.0001 0 TD (S)Tj /T11 1 Tf 50.9999 12 TD ( )Tj /T8 1 Tf 37 -12 TD 14 Tc ( S)Tj /T11 1 Tf 88 12 TD 0 Tc ()Tj /T8 1 Tf 37 -12 TD 14 Tc ( )Tj /T6 1 Tf 148 0 TD 29 Tc [(r)28999.9(e)29000.1(s)29000(p)26999.9(e)29000.1(c)29000(t)28999.9(i)29000.2(v)]TJ 374 0 TD 0.0001 Tc (ely)Tj 97 0 TD 0 Tc ( )Tj 64 0 TD 0.0001 Tc (No)Tj 102 0 TD 29.0001 Tc (ww)Tj 147.0001 0 TD 28.9998 Tc [(ec)28999.8(a)28999.6(n)999.8(d)29000(e)28999.8()]TJ -1530.0001 99 TD 0 Tc [(ne)-25999.9(what)-26000.1(i)0(t)-27000(means)-26000(for)-25000(a)-26000(passw)]TJ 1101 0 TD [(ord)-24000(function)-26999.8(to)-26000(resist)]TJ -1101 100.0005 TD (attac)Tj 183 0 TD (k )Tj 114.0001 0 TD (W)Tj 78 0 TD (e)Tj 69.0001 0 TD -0.0001 Tc (sa)Tj 72.9999 0 TD 30.0001 Tc [(yt)30000.2(h)30000(a)30000.2(t)]TJ 258.0001 0 TD 0 Tc (function)Tj /T8 1 Tf 328.9999 0 TD (F)Tj /T6 1 Tf 65 0 TD ()Tj /T8 1 Tf 32 0 TD [(s )-14000(t)]TJ /T6 1 Tf 106 0 TD 32 Tc [(i)32000(s)1000.1(a)31999.8(n)]TJ /T8 1 Tf 269.9999 0 TD 0 Tc ()Tj /T7 1 Tf 34.0002 0 TD (se)Tj 97.9998 0 TD 0.0001 Tc (cur)Tj 114.0002 0 TD 0 Tc (e)Tj -1823.0001 100 TD (p)Tj 38.0001 0 TD (asswor)Tj 238 0 TD [(d)-30999.9(f)0(unction)]TJ /T6 1 Tf 403.9999 0 TD [(if)-28000(the)-28000(f)0(ollo)]TJ 372 0 TD [(wing)-26999.9(hold)]TJ -991.9999 264.9998 TD -0.0001 Tc ( )Tj 106 0 TD 0 Tc [(Finding)-20000(p)0.1(artial)-18000.1(i)0.1(nformation)-18000(ab)-2000.1(out)]TJ /T8 1 Tf 1230 0 TD (F)Tj /T6 1 Tf 64.9999 0 TD [(s)-19000(secret)-18000(in)]TJ -1294.9998 100 TD [(put)-31000(i)-0.1(s)-30999.9(a)-0.1(s)-29999.9(hard)-30000(as)-30000(guessing)-29000(passw)]TJ 1192 0 TD (ords )Tj 221.0001 0 TD [(Put)-30999.8(an)]TJ -1413 99.0002 TD [(other)-21999.9(w)]TJ 269.9999 0 TD (a)Tj 40 0 TD (y)Tj 37 0 TD 0.0001 Tc [()-21999.9(f)0.1(or)-21999.8(an)]TJ 253 0 TD 0 Tc [(y)-22000(p)-0.1(assw)]TJ 278 0 TD [(ord)-20000(distribution)]TJ /T8 1 Tf 588.9999 0 TD (D)Tj /T6 1 Tf 93 0 TD (and)Tj -1559.9998 100 TD (predicate)Tj /T8 1 Tf 351.9999 0 TD (P)Tj /T6 1 Tf 65 0 TD 20 Tc [(a)20000(n)1000(a)19999.9(t)20000.1(t)20000(a)19999.9(c)]TJ 333 0 TD 0 Tc (k)Tj 42 0 TD (er)Tj /T8 1 Tf 87 0 TD (A)Tj /T6 1 Tf 82 0 TD [(who)-19000(g)-0.1(uesses)]TJ /T8 1 Tf 446.0001 0 TD (P)Tj /T6 1 Tf 84 0 TD (based)Tj -1491 100 TD [(on)-29000(output)-31000(from)]TJ /T8 1 Tf 590.0001 0 TD (F)Tj /T6 1 Tf 94 0 TD [(will)-29999.9(do)-29999.9(almost)-28999.9(a)0(s)-29000(w)]TJ 708.9998 0 TD [(ell)-28999.8(w)-0.2(hen)]TJ /T8 1 Tf -1392.9998 99 TD (F)Tj /T6 1 Tf 92.9999 0 TD [(is)-26999.9(computed)-28000.1(on)-27000(unrelated)-26999.9(passw)]TJ 1162 0 TD (ords)Tj /T12 1 Tf -1211 182.9998 TD ()Tj /T8 1 Tf 47 0 TD 1.9999 Tc (D )Tj /T12 1 Tf 125.9999 0 TD 0 Tc ()Tj /T8 1 Tf 47 0 TD 2 Tc (P )Tj /T12 1 Tf 110 0 TD 0 Tc ()Tj /T8 1 Tf 47 0 TD (A )Tj /T13 1 Tf -294 54.0002 TD ( )Tj 0 50 TD ( )Tj /T6 1 Tf 28 20.9998 TD -0.0001 Tc (Pr)Tj /T13 1 Tf 89.0001 -68 TD 0 Tc ()Tj /T8 1 Tf 34.9999 68 TD (t)Tj /T11 1 Tf 30.0001 12 TD ( )Tj /T12 1 Tf 59.9999 -12 TD ( )Tj /T8 1 Tf 106 0 TD 14 Tc [(T)6999.9( )-17999.9()-13000( )]TJ 291 0 TD 0 Tc (t)Tj /T9 1 Tf 30.0001 12 TD (c)Tj /T12 1 Tf 56.9999 -12 TD ( )Tj /T8 1 Tf 106 0 TD 7.0001 Tc [(T )-23999.8(s)]TJ /T12 1 Tf 172 0 TD 0 Tc ( )Tj /T8 1 Tf 106 0 TD 2 Tc (D )Tj -861 124.0002 TD 0 Tc (b)Tj /T12 1 Tf 59 0 TD ( )Tj /T8 1 Tf 106 0 TD (A)Tj /T6 1 Tf 62 0 TD ()Tj /T8 1 Tf 32 0 TD (t)Tj /T11 1 Tf 30.0001 12 TD ( )Tj /T8 1 Tf 37.9999 -12 TD 14.0001 Tc ( F)Tj /T6 1 Tf 102 0 TD 0 Tc ()Tj /T8 1 Tf 31.9999 0 TD 0.0001 Tc [(s )-13999.9(t)]TJ /T11 1 Tf 106.0001 12 TD 0 Tc ( )Tj /T6 1 Tf 37 -12 TD ()Tj /T8 1 Tf 31.9999 0 TD 14 Tc [( )-14000( t)]TJ /T9 1 Tf 229.0001 12 TD 0 Tc (c)Tj /T8 1 Tf 34 -12 TD 14 Tc ( F)Tj /T6 1 Tf 102.0001 0 TD 0 Tc ()Tj /T8 1 Tf 32 0 TD -0.0002 Tc [(s )-14000.2(t)]TJ /T9 1 Tf 106 12 TD 0 Tc (c)Tj /T6 1 Tf 32.9998 -12 TD ()Tj /T8 1 Tf -1171.9999 125 TD (b)Tj /T6 1 Tf 59 0 TD ()Tj /T8 1 Tf 88 0 TD (P)Tj /T6 1 Tf 65 0 TD ()Tj /T8 1 Tf 32 0 TD (s)Tj /T6 1 Tf 39.0001 0 TD ()Tj /T13 1 Tf 31.9999 -68.0002 TD ()Tj /T12 1 Tf -521.9999 200 TD ()Tj /T6 1 Tf 82.9999 0 TD 0.0001 Tc (Pr)Tj /T13 1 Tf 89 -67 TD 0 Tc ()Tj /T8 1 Tf 34.0001 67 TD (t)Tj /T11 1 Tf 29.9999 12 TD ( )Tj /T12 1 Tf 61 -12 TD ( )Tj /T8 1 Tf 106 0 TD 14 Tc [(T)7000( )-18000()-13000( )]TJ 291 0 TD 0 Tc (t)Tj /T9 1 Tf 30 12 TD (c)Tj /T12 1 Tf 56 -12 TD ( )Tj /T8 1 Tf 106 0 TD 7 Tc [(T )-25000(s)]TJ /T12 1 Tf 173 0 TD 0 Tc ( )Tj /T8 1 Tf 106.0001 0 TD 1.9998 Tc (D )Tj -958.0001 125 TD 0 Tc (b)Tj /T12 1 Tf 59 0 TD ( )Tj /T8 1 Tf 106 0 TD (A)Tj /T6 1 Tf 62 0 TD ()Tj /T8 1 Tf 32 0 TD (t)Tj /T11 1 Tf 30.0001 12 TD ( )Tj /T8 1 Tf 37.9999 -12 TD 14.0001 Tc ( F)Tj /T6 1 Tf 102 0 TD 0 Tc ()Tj /T8 1 Tf 31.9999 0 TD 0.0001 Tc [(s )-13999.9(t)]TJ /T11 1 Tf 106.0001 12 TD 0 Tc ( )Tj /T6 1 Tf 37 -12 TD ()Tj /T8 1 Tf 31.9999 0 TD 14 Tc [( )-14000( t)]TJ /T9 1 Tf 229.0001 12 TD 0 Tc (c)Tj /T8 1 Tf 34 -12 TD 14 Tc ( F)Tj /T6 1 Tf 102.0001 0 TD 0 Tc ()Tj /T8 1 Tf 32 0 TD -0.0002 Tc [(s )-14000.2(t)]TJ /T9 1 Tf 106 12 TD 0 Tc (c)Tj /T6 1 Tf 32.9998 -12 TD ()Tj /T8 1 Tf 64 0 TD ( )Tj -1235.9999 125 TD (s)Tj /T10 1 Tf 39 -34.9998 TD ()Tj /T12 1 Tf 47.0001 34.9998 TD ( )Tj /T8 1 Tf 105.9999 0 TD (D)Tj /T6 1 Tf 71 0 TD ()Tj /T8 1 Tf 55 0 TD (b)Tj /T6 1 Tf 59 0 TD ()Tj /T8 1 Tf 87.0001 0 TD (P)Tj /T6 1 Tf 64.9999 0 TD ()Tj /T8 1 Tf 31.9999 0 TD (s)Tj /T10 1 Tf 39.0001 -34.9998 TD ()Tj /T6 1 Tf 24 34.9998 TD ()Tj /T13 1 Tf 32 -68 TD ()Tj 35 -2.9998 TD ( )Tj 0 50 TD ( )Tj /T8 1 Tf -940 175 TD ()Tj 102.0001 -56 TD ()Tj ET q 5.04 0 0 -0.48 118.908 264.768 cm /Im1 Do Q BT /T6 1 Tf 0.12 0 0 -0.12 118.92 255.18 Tm ()Tj /T12 1 Tf 69.9999 -57 TD 18 Tc (j)Tj /T8 1 Tf 64.0001 0 TD 0 Tc (A)Tj /T12 1 Tf 61.9999 0 TD 19 Tc (j)Tj /T8 1 Tf 84 0 TD 0 Tc (R)Tj /T6 1 Tf 64 0 TD ()Tj /T8 1 Tf 32 0 TD (D)Tj /T6 1 Tf 71 0 TD ()Tj -777.9999 238.9999 TD -0.0001 Tc ( )Tj 106 0 TD 0 Tc [(Finding)-31999.9(second)-32000(preimages)-30000(is)]TJ 1065 0 TD -0.0001 Tc [(as)-32000.1(hard)-31000.1(as)-31000.3(guess)]TJ -1065 99 TD 0 Tc [(ing)-24999.9(passw)]TJ 347.9999 0 TD (ords )Tj 210 0 TD [(A)-25999.9(second)-24000(preimage)-24000.1(of)-25000(an)-24000(input)]TJ -557.9999 100 TD ()Tj /T8 1 Tf 32 0 TD -0.0001 Tc [(s )-14000.1(t)]TJ /T6 1 Tf 106 0 TD 0 Tc ()Tj 68 0 TD (is)Tj 91.0001 0 TD (a)Tj 76.9999 0 TD (dieren)Tj 268 0 TD (t)Tj 68 0 TD (passw)Tj 212 0 TD (ord)Tj /T8 1 Tf 154 0 TD (s)Tj /T10 1 Tf 39 -30 TD ()Tj /T12 1 Tf 59 30 TD ()Tj /T6 1 Tf 0 0 TD ()Tj /T8 1 Tf 101 0 TD (s)Tj /T6 1 Tf 74.0001 0 TD (for)Tj 135 0 TD (whic)Tj 163.9998 0 TD (h)Tj /T8 1 Tf -1647.9998 100 TD (F)Tj /T6 1 Tf 64.9999 0 TD ()Tj /T8 1 Tf 32.0001 0 TD -0.0001 Tc [(s )-14000.1(t)]TJ /T6 1 Tf 106 0 TD 22.9999 Tc ()Tj /T8 1 Tf 142.9999 0 TD 0 Tc (F)Tj /T6 1 Tf 65 0 TD ()Tj /T8 1 Tf 32 0 TD (s)Tj /T10 1 Tf 39 -29.9999 TD ()Tj /T8 1 Tf 23 29.9999 TD 14 Tc ( t)Tj /T6 1 Tf 67 0 TD 0 Tc ( )Tj 125 0 TD [(Here)-26000(w)]TJ 253 0 TD [(e)-26000(m)0(o)-2000(del)-27000(the)-27000(attac)]TJ 634.0001 0 TD (k)Tj 42 0 TD (er)Tj /T8 1 Tf -1626 99 TD (A)Tj /T6 1 Tf 85 0 TD [(as)-23000(a)-22000.1(r)0.1(andomized)-22000.1(circuit)-22999.9(w)0(ith)-24000(m)]TJ 1111 0 TD [(ultiple)-23999.8(output)]TJ ET q 89.28 0 0 -0.48 71.988 177.648 cm /Im1 Do Q BT /T14 1 Tf 0.12 0 0 -0.12 83.04 170.82 Tm ( )Tj /T15 1 Tf 34.9999 24 TD [(Bo)-2000(olean)-27999.9(circuits)-26000(are)-27000(a)-28000(complexit)]TJ 1007 0 TD [(y)-27000(theoretic)-27999.8(abstraction )]TJ -1134 79 TD 31 Tc [(Ab)29000.1(o)28999.9(o)31000.1(l)30999.9(e)31000(a)31000.1(n)]TJ 354.0001 0 TD 0 Tc [(circuit)-31000(is)-31000(an)-31000(acyclic)-32000(c)0(ollection)-32000(of)-31000.1(in)]TJ 1114 0 TD (terconnected)Tj -1468.0001 78 TD (gates )Tj 224.9999 0 TD (Eac)Tj 112.0001 0 TD [(h)-29000(g)0(ate)-31000(computes)-29000(a)-30000(b)-2000(o)-2000(o)0(lean)-30000(function)-29999.8(o)0(f)-28000()-0.2()-31000()-28999.8(or)-29000()]TJ -337 79 TD [(singlebit)-25000(i)0.1(nputs )]TJ 557 0 TD [(A)-25000(randomized)-25000(b)-2000(o)-2000(o)-0.1(lean)-27000(circuit)-25000(tak)]TJ 1043.0001 0 TD [(es)-27000(a)-24999.8(cer)]TJ -1600.0001 79 TD [(tain)-27000(n)]TJ 185.0001 0 TD -0.0001 Tc (um)Tj 97 0 TD 0 Tc [(b)-2000(e)0(r)-25999.9(o)0(f)-27000(random)-26000(input)-27000(bits)-26999.9(i)-0.1(n)-26999.9(addition)-27000(to)-28000(its)-26000.2(r)0(egular)]TJ -282.0001 79.0001 TD (inputs )Tj /T6 1 Tf 2176 -5027 TD 0.0001 Tc (bits)Tj /T12 1 Tf 209.0002 182.9995 TD 0 Tc ()Tj /T8 1 Tf 46.9998 0 TD 2 Tc (D )Tj /T12 1 Tf 126.0002 0 TD 0 Tc ()Tj /T8 1 Tf 47 0 TD (A )Tj /T6 1 Tf -137 124 TD (Pr)Tj /T13 1 Tf 88.9998 -66.9995 TD ()Tj /T8 1 Tf 35.0002 66.9995 TD (t)Tj /T12 1 Tf 52.9998 0 TD ( )Tj /T8 1 Tf 106 0 TD 7 Tc (T )Tj 111.0002 0 TD 0 Tc (s)Tj /T12 1 Tf 62 0 TD ( )Tj /T8 1 Tf 106 0 TD 1.9998 Tc [(D )-30000.2(s)]TJ /T10 1 Tf 165 -33.9995 TD 0 Tc ()Tj /T12 1 Tf 47 33.9995 TD ( )Tj /T8 1 Tf 106 0 TD (A)Tj /T6 1 Tf 62 0 TD ()Tj /T8 1 Tf 32 0 TD -0.0002 Tc [(s )-14000.2(t)]TJ /T6 1 Tf 106 0 TD 0 Tc ()Tj /T8 1 Tf -831 133.0005 TD (s)Tj /T12 1 Tf 62 0 TD ()Tj /T6 1 Tf T* ()Tj /T8 1 Tf 88 0 TD (s)Tj /T10 1 Tf 38.9998 -34 TD ()Tj /T12 1 Tf 42.0002 34 TD ()Tj /T8 1 Tf 74 0 TD (F)Tj /T6 1 Tf 65 0 TD ()Tj /T8 1 Tf 31.9998 0 TD 0.0002 Tc [(s )-13999.8(t)]TJ /T6 1 Tf 106 0 TD 23.0002 Tc ()Tj /T8 1 Tf 143.0002 0 TD 0 Tc (F)Tj /T6 1 Tf 65 0 TD ()Tj /T8 1 Tf 31.9998 0 TD (s)Tj /T10 1 Tf 39.0002 -34 TD ()Tj /T8 1 Tf 23 34 TD 14 Tc ( t)Tj /T6 1 Tf 67 0 TD 0 Tc ()Tj /T13 1 Tf 32 -67 TD ()Tj /T8 1 Tf -1075.0002 192 TD 23 Tc ()Tj /T12 1 Tf 140.0002 0 TD 19 Tc (j)Tj /T8 1 Tf 65 0 TD 0 Tc (A)Tj /T12 1 Tf 62 0 TD 19 Tc (j)Tj /T8 1 Tf 82.9998 0 TD 0 Tc (R)Tj /T6 1 Tf 64 0 TD ()Tj /T8 1 Tf 32.0002 0 TD (D)Tj /T6 1 Tf 71 0 TD ()Tj -1058 265 TD (W)Tj 77.9998 0 TD (e)Tj 78.0002 0 TD (should)Tj 277 0 TD (rst)Tj 184.9998 0 TD 0.0001 Tc (note)Tj 198 0 TD (that)Tj 193 0 TD (this)Tj 175 0 TD 0 Tc (denition)Tj 383.0002 0 TD (matc)Tj 177.9995 0 TD 0.0003 Tc (hes)Tj -1744.9995 100 TD 0 Tc [(our)-19999.8(i)-0.2(n)]TJ 208 0 TD [(tuition)-20999.8(a)-0.2(b)-2000(o)0.2(ut)-20999.8(a)-21000(p)-0.2(assw)]TJ 770.9998 0 TD [(ord)-19000.2(hashing)-20000(function)-21000.5(lik)]TJ 844.0002 0 TD (e)Tj /T7 1 Tf -1823 99 TD -0.0001 Tc (crypt)Tj /T6 1 Tf 183 0 TD 0 Tc ( )Tj 57.9998 0 TD 0.0001 Tc [(If)-19999.7(users)-19999.7(c)]TJ 312 0 TD 0 Tc [(ho)-1999.8(ose)-18000.2(predictable)-20000(enough)-19000.2(passw)]TJ 1132.0002 0 TD (ords)Tj -1685 100 TD (kno)Tj 129.9998 0 TD 0.0001 Tc [(wing)-31999.9(a)-31999.9(p)0.3(assw)]TJ 489.0002 0 TD 0 Tc [(ord)-31000(hash)]TJ 351 0 TD (giv)Tj 107 0 TD [(es)-31999.8(adv)]TJ 232 0 TD [(ersaries)-30000(a)-32000(large)]TJ -1309 100 TD (adv)Tj 127 0 TD (an)Tj 86 0 TD (tagethey)Tj 432 0 TD (can)Tj 163 0 TD (compare)Tj 343 0 TD (hashes)Tj 274 0 TD -0.0002 Tc (of)Tj 106 0 TD 0 Tc (the)Tj 153 0 TD 0.0001 Tc (most)Tj -1684 99 TD -0.0001 Tc [(p)-1999.9(o)-0.3(pular)-25000.1(p)-0.3(assw)]TJ 516.9998 0 TD 0 Tc [(ords)-24000(t)0(o)-26000(that)-26000.2(o)0.2(f)-26000(t)-0.2(he)-26000(passw)]TJ 902.0002 0 TD [(ord)-24000(they)-26000(are)]TJ -1419 100 TD (trying)Tj 257 0 TD (to)Tj 112 0 TD (break )Tj 290.9998 0 TD (If)Tj 118 0 TD (additionally)Tj 425 0 TD ()Tj 63 0 TD (one)Tj 162 0 TD (can)Tj 163.0002 0 TD (guess)Tj 226.9995 0 TD (a)Tj -1817.9995 100 TD [(useful)-24000(p)0.2(redicate)-23000.2(without)-24000(ev)]TJ 974 0 TD [(en)-22999.8(lo)-2000.2(oking)-22000(a)0(t)-24000.2(a)-23000(passw)]TJ 767 0 TD (ord)Tj -1741 99 TD [(hashfor)-27000.2(instance)-28000(b)]TJ 745 0 TD 27.9998 Tc [(yk)27999.6(n)27999.8(o)]TJ 201.9998 0 TD 0 Tc [(wing)-27000(that)-29000.2(the)-28000.2(third)-29000(c)]TJ 766.0002 0 TD (har)Tj -1713 100 TD [(acter)-24000(of)-24000.2(most)-24999.8(passw)]TJ 708.9998 0 TD 0.0001 Tc [(ords)-21999.9(is)-24999.7(a)-24000.1(l)0.3(o)]TJ 386.0002 0 TD 0 Tc (w)Tj 57.9998 0 TD [(ercase)-22000(letterthen)]TJ -1152.9998 100 TD 0.0001 Tc [(clearly)-25999.9(a)0.1(n)-27999.9(a)0.3(dv)]TJ 511 0 TD 0 Tc [(ersary)-25000(can)-26999.8(guess)-26000(this)-28000.2(to)-2000(o )]TJ -511 199 TD -0.0001 Tc [(If)-32000.1(h)-0.3(o)]TJ 196 0 TD 0 Tc (w)Tj 57.9998 0 TD (ev)Tj 79.0002 0 TD [(er)-29000(n)-0.2(o)-30000(s)0(ingle)-30000.2(p)0.2(assw)]TJ 686 0 TD [(ord)-27999.8(o)-2000.2(ccurs)-30000(with)-31000.5(partic)]TJ -1019 99 TD (ularly)Tj 250 0 TD -0.0001 Tc (high)Tj 196 0 TD 0 Tc (probabilit)Tj 354 0 TD (y)Tj 37 0 TD ()Tj 65 0 TD (an)Tj 127.9998 0 TD (adv)Tj 130.0002 0 TD (ersary)Tj 259 0 TD (should)Tj 274.9995 0 TD 0.0001 Tc (need)Tj -1693.9995 100 TD 0 Tc (to)Tj 115 0 TD [(exp)-2000(end)]TJ 299 0 TD (a)Tj 82.9998 0 TD (large)Tj 217.0002 0 TD (amoun)Tj 243 0 TD (t)Tj 71.9998 0 TD (of)Tj 108.0002 0 TD (eort)Tj 233 0 TD (as)Tj 147.9995 0 TD 0.0001 Tc (measured)Tj -1517.9995 100 TD -0.0002 Tc (in)Tj 108 0 TD 0 Tc (circuit)Tj 269.9998 0 TD (gates)Tj 257 0 TD (to)Tj 113.0002 0 TD (disco)Tj 179 0 TD (v)Tj 42 0 TD (er)Tj 107 0 TD -0.0002 Tc (an)Tj 86 0 TD 0 Tc (y)Tj 82 0 TD (nontrivial)Tj 420 0 TD (infor)Tj -1664 99 TD 0.0001 Tc [(mation)-29999.9(a)0.1(b)-1999.9(o)0.3(ut)-30999.9(a)-29999.7(passw)]TJ 808.9998 0 TD 0 Tc (ord )Tj 188 0 TD (Finally)Tj 248.0002 0 TD 31 Tc (w)Tj 112 0 TD -0.0001 Tc [(e)-30000.1(a)0.1(lso)-30000.1(wish)-30000.1(to)]TJ -1357 100 TD (prev)Tj 158 0 TD 0 Tc (en)Tj 81 0 TD 0.0001 Tc [(t)-28999.9(a)0.3(n)-28999.9(attac)]TJ 361 0 TD 0 Tc (k)Tj 41.9998 0 TD [(er)-28000(from)-30000.2(nding)-30000(other)-29000(strings)-29000(that)]TJ -641.9998 100 TD [(hash)-29000(to)-29000.2(the)-30000(same)-28999.8(v)]TJ 692.9998 0 TD 0.0001 Tc [(alue)-29999.9(as)-27999.9(a)-28999.9(p)0.3(assw)]TJ 564.0002 0 TD 0 Tc [(ord)-29000(s)-0.2(uc)]TJ 287 0 TD [(h)-29000(strings)]TJ -1544 99 TD (ma)Tj 109 0 TD 31.9998 Tc [(yp)31999.6(r)31999.8(o)]TJ 194.9998 0 TD 0 Tc (v)Tj 42.0002 0 TD [(e)-31000(equiv)]TJ 256.9998 0 TD (alen)Tj 146.0002 0 TD 32 Tc [(tt)32000(op)32000.2(a)31999.8(s)32000.2(s)31999.8(w)]TJ 381.9998 0 TD 0 Tc [(ords)-30000(during)-32000(authen)]TJ -1130.9998 100 TD (tication )Tj 365 0 TD (The)Tj 180 0 TD (requiremen)Tj 403 0 TD (t)Tj 68.9998 0 TD (of)Tj 104 0 TD (second)Tj 277.0002 0 TD (preimage)Tj 365 0 TD (re)Tj -1763 98.9998 TD [(sistance)-26999.8(guaran)]TJ 558.9998 0 TD [(tees)-26000.2(suc)]TJ 279.0002 0 TD [(h)-28000(c)0(ollisions)-27000.2(are)-25999.8(hard)-28000(to)-28000(nd)]TJ -838 100.0002 TD (ev)Tj 78.9998 0 TD (en)Tj 120.0002 0 TD (with)Tj 198.9998 0 TD 0.0001 Tc (kno)Tj 130 0 TD 0 Tc (wledge)Tj 281 0 TD 0.0002 Tc (of)Tj 105.0002 0 TD -0.0001 Tc (the)Tj 152.9998 0 TD 0 Tc (original)Tj 310 0 TD (passw)Tj 212.0002 0 TD (ord )Tj 209 0 TD (It)Tj -1798 100 TD [(also)-31000.2(ensures)-31000(t)-0.2(hat)]TJ /T8 1 Tf 651 0 TD (F)Tj /T6 1 Tf 97 0 TD [(do)-2000(es)-31999.8(not)-32000(i)0(gnore)-31000(a)-0.2(n)]TJ 684 0 TD [(y)-31000(bits)-32000(of)-32000(its)]TJ -1432 98.9998 TD -0.0001 Tc (passw)Tj 212 0 TD 0 Tc [(ord)-25999.8(i)-0.2(nput )]TJ -212 200 TD [(The)-28000(d)0.2(enition)-27000.2(implies)-28000.2(t)0.2(hat)-28000.2(a)-27000(secure)-26000(passw)]TJ 1531 0 TD 0.0001 Tc [(ord)-25999.9(func)]TJ -1531 99 TD -0.0001 Tc (tion)Tj /T8 1 Tf 171 0 TD 0 Tc (F)Tj /T6 1 Tf 64.9998 0 TD ()Tj /T8 1 Tf 32 0 TD 0.0002 Tc [(s )-13999.8(t)]TJ /T6 1 Tf 106.0002 0 TD 27.9998 Tc (m)Tj 127 0 TD 0.0001 Tc [(ust)-27999.9(m)0.1(ak)]TJ 291.9998 0 TD 0 Tc [(e)-27000.2(n)0.2(ontrivial)-26000(u)-0.2(se)-28000(of)-28000(its)-28000(second)]TJ -792.9998 100 TD (argumen)Tj 313 0 TD (t)Tj /T8 1 Tf 83 0 TD (t)Tj /T6 1 Tf 30 0 TD ( )Tj 64 0 TD (T)Tj 52.9998 0 TD [(o)-29000.2(s)0.2(ee)-28000.2(this)-30000(consider)-27000(that)-30000(the)-29000(rst)-29000(bit)]TJ -542.9998 99 TD -0.0002 Tc (of)Tj /T8 1 Tf 85.9998 0 TD 0 Tc (F)Tj /T6 1 Tf 65.0002 0 TD ()Tj /T8 1 Tf 32 0 TD -0.0002 Tc (s )Tj /T6 1 Tf 76 0 TD 0 Tc [()-19000(is)-19000(a)-19000(p)-2000(erfectly)-19000.2(v)]TJ 603 0 TD [(alid)-18999.8(predicate)-17999.8(o)0(n)-19000.2(passw)]TJ 823 0 TD (ords )Tj -1685 100 TD [(An)-19000(attac)]TJ 309.9998 0 TD (k)Tj 42.0002 0 TD [(er)-17000(could)-19000(easily)-18000(g)-0.2(uess)-18000(this)-18999.8(predicate)-18000.5(i)0(f)-19000(either)]TJ /T8 1 Tf -352 100 TD (F)Tj /T6 1 Tf 98.9998 0 TD (ignored)Tj 302.0002 0 TD (its)Tj 121.9998 0 TD (second)Tj 275.0002 0 TD (argumen)Tj 313 0 TD (t)Tj 65 0 TD -0.0002 Tc (or)Tj 107.9998 0 TD 0.0001 Tc (the)Tj 149 0 TD 0 Tc (string)Tj 243.0002 0 TD ()Tj 76 0 TD 1.9995 Tc [(oc)1999()]TJ -1752 99.0001 TD 0 Tc [(curred)-25000.2(i)0.2(n)]TJ /T8 1 Tf 352 0 TD (T)Tj /T6 1 Tf 85 0 TD [(with)-26000(high)-26000.2(probabilit)]TJ 724 0 TD (y)Tj 37 0 TD ( )Tj 58 0 TD [(This)-26000(p)-2000(oin)]TJ 345 0 TD [(t)-26000(i)0(s)-25000(not)]TJ -1601 100 TD (merely)Tj 277 0 TD (an)Tj 123 0 TD (academic)Tj 366.9998 0 TD (one )Tj 205 0 TD (A)Tj 97.0002 0 TD (singleinput)Tj 460 0 TD (passw)Tj 212 0 TD (ord)Tj -1741 100 TD [(hashing)-31000.2(f)0.2(unction)]TJ /T8 1 Tf 638 0 TD (F)Tj /T6 1 Tf 64.9998 0 TD ()Tj /T8 1 Tf 32 0 TD (s)Tj /T6 1 Tf 39.0002 0 TD 32 Tc [(c)32000(a)32000.2(n)]TJ 221 0 TD 1.9998 Tc (be)Tj 117 0 TD 0 Tc (in)Tj 66.9998 0 TD (v)Tj 42 0 TD 0.0001 Tc [(erted)-30999.9(b)]TJ 260.0002 0 TD [(y)-30999.9(a)-30999.9(circuit)]TJ -1481 99 TD 0 Tc [(large)-18000(e)0(nough)-18999.8(t)0(o)-20000(e)0(nco)-2000(d)0(e)-19000(a)-19000(l)0.2(o)-2000.2(o)0.2(kup)-20000(t)0(able)-19000.2(mapping)]TJ /T8 1 Tf 1691.9995 0 TD (F)Tj /T6 1 Tf 65.0005 0 TD ()Tj /T8 1 Tf 32 0 TD (s)Tj /T6 1 Tf 39 0 TD ()Tj -1828 100 TD [(or)-27000.2(s)0.2(ucien)]TJ 422.9998 0 TD [(tly)-28000.2(man)]TJ 282 0 TD -0.0001 Tc [(y)-28000.3(bits)-28000.3(o)-0.1(f)]TJ /T8 1 Tf 329 0 TD 0 Tc (F)Tj /T6 1 Tf 65.0002 0 TD ()Tj /T8 1 Tf 31.9998 0 TD (s)Tj /T6 1 Tf 39.0002 0 TD -0.0001 Tc [()-29000.3(to)]TJ /T8 1 Tf 194 0 TD 0 Tc (s)Tj /T6 1 Tf 38.9998 0 TD ( )Tj 61.0002 0 TD 0.0001 Tc [(The)-27999.9(size)-27999.4(of)]TJ -1464 99 TD -0.0001 Tc (suc)Tj 114 0 TD 0 Tc [(h)-30999.8(a)-31000.2(circuit)-31000(dep)-2000.2(e)0(nds)-32000(only)-31000(on)-31000.2(the)-31000(p)-0.2(robabilit)]TJ 1542 0 TD [(y)-29999.5(d)-0.5(is)]TJ -1656 100 TD (tribution)Tj 358.9998 0 TD 0.0002 Tc (of)Tj 104.0002 0 TD -0.0001 Tc (the)Tj 151 0 TD (passw)Tj 212 0 TD (ords)Tj 213.9998 0 TD 0 Tc (not)Tj 156 0 TD 0.0002 Tc (on)Tj 124.0002 0 TD 0 Tc (the)Tj 152 0 TD (particulars)Tj -1472 100.0001 TD -0.0002 Tc (of)Tj /T8 1 Tf 95 0 TD 0 Tc (F)Tj /T6 1 Tf 64.9998 0 TD ( )Tj -159.9998 199 TD [(As)-24000(prop)-2000(osed)-24000(b)]TJ 514 0 TD [(y)-24000(Morris)-23000(and)-23999.8(Thompson)-23000.2( \012)-25000(ho)]TJ 1118 0 TD (w)Tj 58 0 TD (ev)Tj 78.9995 0 TD 0.0003 Tc (er)Tj -1768.9995 100 TD 0 Tc [(lo)-2000(okup)-31000(tables)-32000(can)-31999.8(b)-2000.2(e)-32000(th)]TJ 870.9998 0 TD (w)Tj 58 0 TD [(arted)-31000(with)]TJ 415.0002 0 TD [(the)-32000(second)-31000(in)]TJ -1344 98.9998 TD -0.0001 Tc (put)Tj 158 0 TD 0 Tc (to)Tj /T8 1 Tf 107 0 TD (F)Tj /T6 1 Tf 64.9998 0 TD ()Tj 57.0002 0 TD -0.0001 Tc (whic)Tj 164 0 TD 0 Tc (h)Tj 78.9998 0 TD 0.0001 Tc (they)Tj 193.0002 0 TD 0 Tc [(call)-31999.8(a)]TJ /T7 1 Tf 231.9998 0 TD (salt)Tj /T6 1 Tf 125 0 TD ( )Tj 77.0002 0 TD (If)Tj 88 0 TD (a)Tj 75 0 TD 0.0001 Tc [(random)-31999.4(salt)]TJ -1420 100.0002 TD -0.0002 Tc (is)Tj 90 0 TD 0 Tc (c)Tj 35 0 TD (hosen)Tj 237 0 TD (whenev)Tj 267.9998 0 TD (er)Tj 103.0002 0 TD (users)Tj 215 0 TD (establish)Tj 347.9998 0 TD (new)Tj 177.0002 0 TD (passw)Tj 212 0 TD (ords)Tj -1685 98.9998 TD [(and)-23000(i)0.2(f)-23000(t)0(he)-22999.8(salt)-21999.8(space)-21999.8(i)-0.2(s)-23000(l)0(arge)-21000.2(enough)-21999.8(to)-22000(ensure)-23000(a)-22000(neg)]TJ ET endstream endobj 24 0 obj << /ProcSet [/PDF /Text /ImageB ] /Font << /T6 9 0 R /T7 10 0 R /T8 19 0 R /T9 20 0 R /T10 21 0 R /T11 25 0 R /T12 26 0 R /T13 27 0 R /T14 28 0 R /T15 29 0 R >> /XObject << /Im1 30 0 R >> /ExtGState << /GS1 11 0 R >> >> endobj 32 0 obj << /Length 22251 >> stream BT /T6 1 Tf 0.12 0 0 -0.12 72 723.9 Tm 0 g /GS1 gs 0 Tc 0 Tw [(ligible)-27000.1(p)0.1(robabilit)]TJ 598 0 TD [(y)-27000.1(o)0.1(f)-27000(recurrence)-26000(lo)-2000(okup)-27000(tables)-28000(oer)]TJ -598 100 TD [(an)-22999.9(adv)]TJ 241.0001 0 TD [(ersary)-20999.9(no)-23000(adv)]TJ 481.0001 0 TD -0.0001 Tc (an)Tj 85.9999 0 TD 0 Tc [(tage)-23000(he)-24000.1(ma)]TJ 415 0 TD 22 Tc [(ya)22000(s)-1000.1(w)]TJ 222 0 TD 0 Tc [(ell)-22999.8(compute)]TJ /T8 1 Tf -1445 99 TD (F)Tj /T6 1 Tf 95.0001 0 TD [(at)-29000.1(the)-29999.9(t)-0.1(ime)-30000(o)0(f)-29000(a)-0.1(ttac)]TJ 717.9999 0 TD (k )Tj 108.9999 0 TD [(If)-31000.1(o)0.1(n)-29000(t)-0.1(he)-30000.1(other)-29000(h)0.2(and)-29999.8(the)]TJ -921.9999 100 TD [(salt)-24999.9(space)-25000(i)0(s)-24999.9(t)0(o)-2000(o)-25000(small)-25000(the)-26000(output)-26000(bits)-25999.9(o)0(f)]TJ /T8 1 Tf 1500.0001 0 TD (F)Tj /T6 1 Tf 89.9998 0 TD [(b)-2000.2(ecome)]TJ -1589.9999 100 TD [(useful)-31000.1(p)0.1(redicates)-30000(on)-30000(passw)]TJ 967 0 TD [(ords)-29000(a)-30000(f)0(act)-31000(exploited)-30000.2(b)]TJ 849.0001 0 TD (y)Tj -1816.0001 99 TD [(the)-28000(QCrac)]TJ 377.9999 0 TD [(k)-26000.1( )]TJ 176.0001 0 TD [()-27000(p)-0.1(rogram)-26000.1(describ)-2000(ed)-26999.9(in)-28000(Section)-28000()0.2( )]TJ -554 199 TD [(While)-31000.1(s)0.1(alted)-29000(p)0(assw)]TJ 699 0 TD [(ords)-28000.1(defeat)-30000(l)0.2(o)-2000.1(okup)-30000.1(tables)-29999.8(giv)]TJ 1078.9999 0 TD (en)Tj -1777.9999 100 TD (a)Tj 80 0 TD (particular)Tj 395.0001 0 TD -0.0001 Tc (salt)Tj 169 0 TD (and)Tj 171.9999 0 TD 0 Tc (hash)Tj 232 0 TD (an)Tj 126.0001 0 TD (adv)Tj 129.9999 0 TD (ersary)Tj 258.0001 0 TD -0.0001 Tc (can)Tj 163.9998 0 TD 0.0001 Tc (still)Tj -1725.9999 100 TD (moun)Tj 201.0001 0 TD 0 Tc [(t)-25999.9(a)-26000(brute)-26000.1(f)0(orce)-26000.1(attac)]TJ 729.0001 0 TD 25 Tc (kb)Tj 113 0 TD 25.9999 Tc [(ye)25999.9(v)]TJ 145.9999 0 TD 0 Tc (aluating)Tj /T8 1 Tf 322.0001 0 TD (F)Tj /T6 1 Tf 64.9998 0 TD ()Tj /T8 1 Tf 32 0 TD 0.0002 Tc [(s )-13999.6(t)]TJ /T6 1 Tf 106 0 TD 26.0002 Tc [(o)26000.4(n)]TJ -1713.9999 99 TD 0 Tc (ev)Tj 79.0001 0 TD [(ery)-23000.1(p)-1999.9(ossible)-24000.1(p)0.1(assw)]TJ 657.9999 0 TD (ord )Tj 178 0 TD [(It)-25000(follo)]TJ 240.0001 0 TD [(ws)-23000(that)-25000(the)-25000(b)-2000(est)-25000(se)]TJ -1155.0001 100 TD (curit)Tj 169.0001 0 TD [(y)-23999.9(o)-0.1(ne)-25000.1(can)-24999.9(a)0(c)]TJ 444.9999 0 TD (hiev)Tj 148 0 TD 23.0001 Tc [(ei)23000.2(s)]TJ /T8 1 Tf 141 0 TD 0 Tc ()Tj /T12 1 Tf 57 0 TD ()Tj /T6 1 Tf 88 0 TD ()Tj /T8 1 Tf 42 0 TD ()Tj /T12 1 Tf 42 0 TD (j)Tj /T8 1 Tf 23.0001 0 TD (F)Tj /T12 1 Tf 64.9999 0 TD (j)Tj /T6 1 Tf 23.0001 0 TD [()-23999.9(where)]TJ /T12 1 Tf 285 0 TD (j)Tj /T8 1 Tf 22.9998 0 TD (F)Tj /T12 1 Tf 65 0 TD (j)Tj /T6 1 Tf 48 0 TD 0.0002 Tc [(is)-24999.6(the)]TJ -1663.9999 100 TD 0 Tc [(cost)-27999.9(in)-29000(gates)-26999.9(o)-0.1(f)-28999.9(implemen)]TJ 927 0 TD (ting)Tj /T8 1 Tf 172.0001 0 TD (F)Tj /T6 1 Tf 64.9999 0 TD ( )Tj 62 0 TD (Usabilit)Tj 281.9999 0 TD [(y)-28000.2(require)]TJ -1507.9999 99 TD (men)Tj 149.9999 0 TD [(ts)-30999.9(therefore)-29000.1(eect)-30999.9(a)-31000(lo)]TJ 805.0002 0 TD (w)Tj 57.9999 0 TD [(er)-29000.1(limit)-31000(on)]TJ /T8 1 Tf 418 0 TD ()Tj /T6 1 Tf 34.0001 0 TD [(if)-31000(p)-2000.2(eople)]TJ -1465.0001 100 TD 0.0001 Tc (can)Tj 162 0 TD (only)Tj 193 0 TD 0 Tc (tolerate)Tj 314.0001 0 TD (a)Tj 79.9999 0 TD (one)Tj 162 0 TD (second)Tj 278 0 TD (dela)Tj 146 0 TD (y)Tj 81 0 TD -0.0001 Tc (for)Tj 136.9999 0 TD 0 Tc (c)Tj 35.0002 0 TD -0.0001 Tc (hec)Tj 118 0 TD 0 Tc (king)Tj -1706.0001 98.9995 TD (passw)Tj 212 0 TD (ords)Tj /T8 1 Tf 206 0 TD (F)Tj /T6 1 Tf 95 0 TD -0.0001 Tc [(can)-30000.1(t)-0.2(ak)]TJ 271.0001 0 TD 0 Tc [(e)-29999.9(a)-0.1(t)-30000(m)0(ost)-31000(o)0.1(ne)-30000(second)-29000(to)-31000(ev)]TJ 984 0 TD -0.0001 Tc (al)Tj -1768.0001 100 TD 0 Tc (uate )Tj /T8 1 Tf 219.0001 0 TD (F)Tj /T6 1 Tf 94 0 TD [(should)-27999.9(not)-29000(tak)]TJ 528.9999 0 TD [(e)-27000.1(s)0.1(ignican)]TJ 400 0 TD [(tly)-28000(l)-0.1(ess)-28000(ho)]TJ 390.0001 0 TD (w)Tj 57.9998 0 TD (ev)Tj 79.0002 0 TD -0.0001 Tc (er)Tj -1769.0001 100 TD 0 Tc [(as)-26999.9(this)-28000.1(w)]TJ 322.0001 0 TD [(ould)-27000(unnecessarily)-26000.1(w)]TJ 747.9999 0 TD 0.0001 Tc (eak)Tj 121 0 TD 0 Tc [(en)-26000.1(securit)]TJ 347.9999 0 TD (y)Tj 37 0 TD ( )Tj -1575.9999 199.0005 TD [(The)-26000.1(n)]TJ 213.0001 0 TD -0.0001 Tc (um)Tj 113 0 TD 0 Tc [(b)-1999.9(e)0(r)-25000.1(o)0.1(f)-25000(g)-0.1(ates)]TJ /T12 1 Tf 446.0001 0 TD (j)Tj /T8 1 Tf 22.9999 0 TD (A)Tj /T12 1 Tf 62 0 TD (j)Tj /T6 1 Tf 49.0001 0 TD [(that)-25000(an)-26000(adv)]TJ 420.9999 0 TD [(ersary)-21999.8(can)-24999.8(r)-0.2(ea)]TJ -1327 100 TD (sonably)Tj 313.0001 0 TD (m)Tj 66.9999 0 TD (uster)Tj 219 0 TD (for)Tj 138 0 TD (an)Tj 126 0 TD (attac)Tj 183 0 TD (k)Tj 81.9999 0 TD (increases)Tj 358.0002 0 TD (constan)Tj 276 0 TD (tly)Tj -1762.0001 98.9998 TD 0.0001 Tc (as)Tj 119.0001 0 TD 0 Tc (hardw)Tj 225 0 TD (are)Tj 154.9999 0 TD (impro)Tj 211 0 TD (v)Tj 42 0 TD 0.0001 Tc (es )Tj 180 0 TD 0 Tc (F)Tj 47 0 TD (ortunately)Tj 370.0001 0 TD ()Tj 71.9999 0 TD (so)Tj 118.9999 0 TD 0.0001 Tc [(do)-1999.9(es)]TJ 205 0 TD (the)Tj -1744.9999 100 TD 0 Tc [(sp)-2000(eed)]TJ 236 0 TD -0.0001 Tc (of)Tj 101 0 TD 0 Tc (mac)Tj 146 0 TD (hines)Tj 219 0 TD (that)Tj 187 0 TD (m)Tj 67.0001 0 TD -0.0001 Tc (ust)Tj 144.9999 0 TD 0 Tc (legitimately)Tj 462.0001 0 TD (ev)Tj 75.9998 0 TD (aluate)Tj /T8 1 Tf -1638.9999 99 TD (F)Tj /T6 1 Tf 65 0 TD ( )Tj 59.9999 0 TD [(That)-25999.9(means)-25999.9(p)0(assw)]TJ 671.0001 0 TD [(ords)-25000.1(should)-26000.1(not)-26999.9(b)-2000.1(e)-26999.8(h)-0.2(ashed)-26000(b)]TJ 1020.0001 0 TD (y)Tj -1816.0001 100 TD [(a)-32000(s)-0.1(ingle)]TJ 311 0 TD (function)Tj /T8 1 Tf 330 0 TD (F)Tj /T6 1 Tf 98 0 TD (with)Tj 194 0 TD (xed)Tj 206 0 TD [(computational)-32000(cost)]TJ -1139 100 TD [(but)-30999.9(r)-0.1(ather)-29999.9(b)]TJ 452 0 TD [(y)-30000(one)-30000.1(of)-31000(a)-30000(f)0(amily)-31000(o)0(f)-30000.1(f)0(unctions)-31000(w)0(ith)-30999.8(a)-0.2(r)]TJ -452 99 TD [(bitrarily)-31000(h)-0.1(igh)-30999.9(c)0(ost )]TJ 733 0 TD (Instead)Tj 298.0001 0 TD [(of)-31000(rep)-1999.9(e)0.1(atedly)-31000(t)0(hro)]TJ 658.9998 0 TD 0.0001 Tc (wing)Tj -1689.9999 100 TD 0 Tc [(out)-21000(f)0(unctions)-21999.9(lik)]TJ 581 0 TD (e)Tj /T7 1 Tf 58 0 TD (crypt)Tj /T6 1 Tf 213 0 TD [(and)-21000(MD)]TJ /T7 1 Tf 357 0 TD (crypt)Tj /T6 1 Tf 213 0 TD [(to)-20999.8(start)-21000(o)]TJ 328.0001 0 TD (v)Tj 42 0 TD (er)Tj -1792.0001 100 TD [(with)-20000(more)-19000(exp)-2000(e)-0.1(nsiv)]TJ 691 0 TD [(e)-20000(but)-20000(incompatible)-20000(ones)-21000(systems)]TJ -691 99 TD [(should)-24000.1(allo)]TJ 388.0001 0 TD [(w)-24000(t)0.1(he)-24999.9(cost)-24000(of)-23999.9(an)]TJ 568.9999 0 TD [(y)-24000(passw)]TJ 280.0001 0 TD [(ord)-22000(manipulation)]TJ -1237.0001 100 TD (soft)Tj 130 0 TD (w)Tj 58.0001 0 TD [(are)-30999.9(t)-0.1(o)]TJ 250.0001 0 TD (scale)Tj 204.9999 0 TD [(gracefully)-32000(with)]TJ 578 0 TD (a)Tj 75 0 TD (tunable)Tj 304.9999 0 TD (param)Tj -1600.9999 99.0002 TD (eter )Tj 209 0 TD 0.0001 Tc (Th)Tj 104.0001 0 TD -0.0001 Tc (us)Tj /T8 1 Tf 134.0001 0 TD 0 Tc ()Tj /T6 1 Tf 64.9999 0 TD [(can)-30999.9(decrease)-30000.1(as)-30000.1(fast)-31000(as)-31000.1(hardw)]TJ 1087.0001 0 TD -0.0001 Tc [(are)-28999.9(i)-0.3(m)]TJ -1599.0001 100 TD 0.0001 Tc (pro)Tj 119.0001 0 TD 0 Tc (v)Tj 41.9999 0 TD [(es)-29999.9(and)-31000(u)-0.1(sers)-30999.9(will)]TJ 639.0001 0 TD (tolerate )Tj 349 0 TD [(Compromised)-30000.2(pass)]TJ -1149.0001 100 TD (w)Tj 58 0 TD (ord)Tj 154 0 TD (databases)Tj 386 0 TD (will)Tj 164 0 TD (then)Tj 196 0 TD (enjo)Tj 148.0001 0 TD (y)Tj 77.9999 0 TD (maxim)Tj 245 0 TD (um)Tj 148.9999 0 TD 0.0001 Tc (securit)Tj 239.0002 0 TD 0 Tc (y)Tj -1817.0001 99 TD [(against)-26000.1(o)0.1(line)-28000(attac)]TJ 744 0 TD (ks )Tj -744 200 TD (In)Tj 113.0001 0 TD (summary)Tj 328.9999 0 TD ()Tj 60 0 TD (a)Tj 78 0 TD 0.0001 Tc [(go)-1999.8(o)-1999.9(d)]TJ 212 0 TD 0 Tc (passw)Tj 212 0 TD (ord)Tj 155 0 TD (function)Tj 334.0001 0 TD (mak)Tj 152.9998 0 TD (es)Tj 106 0 TD (ex)Tj -1751.9999 99 TD (tracting)Tj 327.9999 0 TD 0.0001 Tc (an)Tj 86.0001 0 TD 0 Tc (y)Tj 85 0 TD (partial)Tj 282.0001 0 TD (information)Tj 463.9999 0 TD [(ab)-1999.9(out)]TJ 250.9999 0 TD 0.0001 Tc (passw)Tj 212 0 TD (ords)Tj -1707.9999 100 TD (as)Tj 109 0 TD 0 Tc (dicult)Tj 312 0 TD 0.0001 Tc (as)Tj 110 0 TD 0 Tc (guessing)Tj 335 0 TD (passw)Tj 211.9999 0 TD (ords )Tj 234.0002 0 TD (A)Tj 97.9999 0 TD (concrete)Tj 334.9999 0 TD (pa)Tj -1744.9999 99 TD (rameter)Tj /T8 1 Tf 346 0 TD ()Tj /T6 1 Tf 34 0 TD ()Tj 64.0001 0 TD (should)Tj 273.9999 0 TD (c)Tj 35.0001 0 TD (haracterize)Tj 435.9999 0 TD (this)Tj 172.0001 0 TD (dicult)Tj 274 0 TD (y)Tj 37 0 TD ( )Tj 92.9998 0 TD (T)Tj 53.0002 0 TD (o)Tj -1818.0001 99.9999 TD 0.0001 Tc (ac)Tj 77 0 TD 0 Tc (hiev)Tj 147.9999 0 TD (e)Tj 71.0001 0 TD 0.0001 Tc (lo)Tj 63 0 TD 0 Tc (w)Tj 95 0 TD (v)Tj 39 0 TD (alues)Tj 216 0 TD (of)Tj /T8 1 Tf 102 0 TD ()Tj /T6 1 Tf 34 0 TD ()Tj 61.0001 0 TD (a)Tj 76.9999 0 TD (passw)Tj 212 0 TD (ord)Tj 154.0001 0 TD (function)Tj 333 0 TD (m)Tj 67 0 TD -0.0001 Tc (ust)Tj -1749.0001 100 TD 0 Tc (tak)Tj 116.0001 0 TD [(e)-30999.9(a)-32000(second)-32000(i)0(nput)]TJ 665.0001 0 TD [(the)-31999.9(s)0(alt)]TJ 332.9999 0 TD (that)Tj 185.0001 0 TD (prev)Tj 158 0 TD (en)Tj 81 0 TD -0.0001 Tc [(ts)-31000.1(adv)]TJ 225.9998 0 TD 0 Tc (er)Tj -1763.9999 99 TD [(saries)-20999.9(from)-20999.9(b)-2000(e)-0.1(neting)-23000(from)-21000(large)-21000.1(l)0.2(o)-2000.1(okup)-21000(tables )]TJ 1717.0001 0 TD (The)Tj -1717.0001 100 TD 2.0001 Tc [(be)2000.1(s)2000.2(t)-27999.9(v)]TJ 219.0001 0 TD -0.0001 Tc [(alue)-30000.2(of)]TJ /T8 1 Tf 275.0001 0 TD 0 Tc ()Tj /T6 1 Tf 62.9999 0 TD [(is)-30000(in)]TJ 153 0 TD (v)Tj 42 0 TD [(ersely)-28000.1(prop)-2000.1(ortional)-29000.1(to)-28999.8(the)-31000(c)0(ost)]TJ -752 100 TD 0.0001 Tc [(of)-27999.9(ev)]TJ 171 0 TD 0 Tc [(aluating)-27999.9(a)-29000.1(p)0.1(assw)]TJ 607.0001 0 TD [(ord)-26000(f)0(unction )]TJ 506.9999 0 TD [(This)-29000.1(establishes)]TJ -1285 99 TD (a)Tj 77 0 TD -0.0001 Tc (lo)Tj 63 0 TD 0 Tc (w)Tj 58.0001 0 TD (er)Tj 104.9999 0 TD (limit)Tj 206.0001 0 TD (for)Tj /T8 1 Tf 136 0 TD ()Tj /T6 1 Tf 70 0 TD (based)Tj 239 0 TD (on)Tj 123.9999 0 TD 0.0001 Tc (the)Tj 151.0001 0 TD 0 Tc (maxim)Tj 245.0001 0 TD -0.0002 Tc (um)Tj 151 0 TD 0 Tc (tolera)Tj -1625.0001 100 TD -0.0001 Tc (ble)Tj 139.0001 0 TD 0 Tc [(cost)-30999.9(of)]TJ 274.9999 0 TD (ev)Tj 76 0 TD (aluating)Tj /T8 1 Tf 327 0 TD (F)Tj /T6 1 Tf 98 0 TD [(during)-32000(legitimate)-32000(use )]TJ 849.9999 0 TD (As)Tj -1764.9999 99.0001 TD (hardw)Tj 224.9999 0 TD (are)Tj 144.0001 0 TD -0.0001 Tc [(sp)-2000.2(eeds)]TJ 268.9999 0 TD 0 Tc (constan)Tj 276 0 TD (tly)Tj 132 0 TD (impro)Tj 211 0 TD (v)Tj 42.0001 0 TD (e)Tj 94.9999 0 TD (a)Tj 75.9999 0 TD 2 Tc [(g)1999.8(ood)]TJ 209.0002 0 TD -0.0001 Tc (pass)Tj -1679.0001 100 TD 0 Tc (w)Tj 58 0 TD [(ord)-27000(s)0(c)]TJ 216 0 TD [(heme)-27000(should)-28000(allo)]TJ 608 0 TD [(w)-27000(the)-28000.1(cost)-27999.8(of)]TJ /T8 1 Tf 497 0 TD (F)Tj /T6 1 Tf 93.0001 0 TD [(to)-27000(increase)]TJ -1472.0001 99.9998 TD [(gradually)-25999.9(s)-0.1(o)-27000(t)0.1(hat)]TJ /T8 1 Tf 649 0 TD ()Tj /T6 1 Tf 61 0 TD [(can)-27000.1(d)0.1(ecrease)-26000(o)]TJ 520.0001 0 TD (v)Tj 41.9999 0 TD -0.0001 Tc [(er)-26000.3(time )]TJ -1272 199.0001 TD 0 Tc [(One)-31000.1(nal)-30999.9(criterion)-30000.1(for)-31000.1(a)-30999.9(go)-2000(o)-2000(d)-29999.9(passw)]TJ 1325 0 TD [(ord)-29000.1(f)0(unction)]TJ 479.0001 0 TD -0.0002 Tc (is)Tj -1804.0001 100 TD 0 Tc [(then)-29000(to)-28000.1(minimize)-28000.1(t)0.1(he)-28999.9(v)]TJ 830 0 TD (alue)Tj /T8 1 Tf 176.0001 0 TD ()Tj /T12 1 Tf 51.9999 0 TD 19 Tc (j)Tj /T8 1 Tf 65 0 TD 0 Tc (F)Tj /T12 1 Tf 65 0 TD (j)Tj /T6 1 Tf 23.0001 0 TD ( )Tj 61.9999 0 TD [(That)-28000(means)-27000(one)]TJ -1273 99.0001 TD (should)Tj 271 0 TD 0.0001 Tc (mak)Tj 153 0 TD 0 Tc (e)Tj 72 0 TD (an)Tj 86 0 TD (y)Tj 79 0 TD (passw)Tj 212 0 TD (ord)Tj 154.9999 0 TD (function)Tj 333.0002 0 TD -0.0001 Tc (as)Tj 109.9998 0 TD 0 Tc (ecien)Tj 247.0002 0 TD (t)Tj 68 0 TD -0.0002 Tc (as)Tj 224 -5280 TD 0 Tc [(p)-1999.8(o)-0.2(ssible)-22000.2(for)-21999.8(the)-22999.8(s)-0.2(etting)-22999.8(in)-22000(whic)]TJ 1089.9998 0 TD [(h)-23000(i)-0.2(t)-23000(will)-23000.2(o)0(p)-1999.8(erate )]TJ 626.9998 0 TD 0.0003 Tc (The)Tj -1716.9995 100 TD 0 Tc [(designers)-17000(o)-0.2(f)]TJ /T7 1 Tf 433 0 TD (crypt)Tj /T6 1 Tf 209.9998 0 TD [(failed)-19000.2(t)0.2(o)-19000.2(d)0.2(o)-18000.2(this )]TJ 606.0002 0 TD [(They)-18000(based)]TJ /T7 1 Tf 427 0 TD (crypt)Tj /T6 1 Tf -1676 99 TD [(on)-31000.2(DES)-30999.8( )]TJ 421.9998 0 TD [()-31000(a)-30999.8(particularly)-29000(inecien)]TJ 919 0 TD -0.0001 Tc [(t)-32000.1(a)-0.3(lgorithm)-29000.1(to)]TJ -1340.9998 100 TD 0 Tc (implemen)Tj 347.9998 0 TD 24 Tc [(ti)23999.8(n)1000(s)24000.2(o)23999.8(f)24000(t)]TJ 278.0002 0 TD 0 Tc (w)Tj 57.9998 0 TD 0.0001 Tc [(are)-21999.9(b)-1999.9(ecause)-22999.7(o)-0.1(f)-22999.9(m)0.3(an)]TJ 682 0 TD -0.0001 Tc [(y)-22000.3(b)0.1(it)-24000.1(transp)-2000.6(o)-0.1()]TJ -1365.9998 100 TD 0 Tc (sitions )Tj 299 0 TD -0.0001 Tc [(They)-29000.3(discoun)]TJ 487 0 TD 0 Tc [(ted)-30000.2(hardw)]TJ 370 0 TD [(are)-27999.8(attac)]TJ 322.9998 0 TD 0.0001 Tc [(ks)-28999.9(in)-30999.9(part)]TJ -1478.9998 99 TD 0 Tc [(b)-1999.8(ecause)]TJ /T7 1 Tf 304.9998 0 TD (crypt)Tj /T6 1 Tf 217 0 TD [(cannot)-26000(b)-2000(e)-26000(calculated)-25000(with)-26000(sto)-2000(c)]TJ 1103.0002 0 TD 24.9995 Tc [(kD)24999(E)24999.5(S)]TJ -1625 100 TD -0.0001 Tc (hardw)Tj 225 0 TD 0 Tc [(are )-31999.8(Unfortunately)]TJ 670 0 TD [()-21000(B)0(iham)-18000( )-18999.8(l)-0.2(ater)-18000(disco)]TJ 771.9995 0 TD (v)Tj 42.0005 0 TD (ered)Tj -1709 99 TD 29 Tc [(as)29000.2(o)28999.8(f)29000(t)]TJ 201 0 TD 0 Tc (w)Tj 58 0 TD [(are)-27000(tec)]TJ 243 0 TD 0.0001 Tc [(hnique)-28999.9(k)0.3(no)]TJ 400.9998 0 TD 0 Tc [(wn)-29000(as)-28000(bitslicing)-30000.2(that)-28999.5(elim)]TJ -902.9998 100 TD (inates)Tj 250 0 TD -0.0001 Tc (the)Tj 152.9998 0 TD 0.0001 Tc (cost)Tj 180.0002 0 TD 0 Tc (of)Tj 105 0 TD (bit)Tj 139 0 TD [(transp)-2000(o)0.2(sitions)]TJ 543.9998 0 TD 0.0002 Tc (in)Tj 106 0 TD -0.0001 Tc (computing)Tj -1476.9998 100 TD (man)Tj 154.9998 0 TD 22.0002 Tc [(ys)22000.4(i)22000(m)]TJ 189.0002 0 TD 0 Tc [(ultaneous)-22000(DES)-23000(encryptions )]TJ 1033.9998 0 TD [(While)-23000.5(bitslic)]TJ -1377.9998 99 TD [(ing)-28000(w)]TJ 196.9998 0 TD [(ont)-26999.8(help)-29000.2(an)]TJ 437 0 TD (y)Tj 42.0002 0 TD -0.0001 Tc [(one)-26000.1(l)-0.1(og)-27000.3(in)-29000.1(faster)-27000.1(i)-0.1(t)-29000.1(oers)-27000.6(a)-27000.1(stag)]TJ -676 100 TD 0 Tc [(gering)-26000(sp)-1999.8(eedup)-28000(to)-27999.8(brute)-27000.2(f)0(orce)-27000.2(passw)]TJ 1306 0 TD [(ord)-25999.8(searc)]TJ 327 0 TD (hes )Tj -1633 199 TD -0.0001 Tc [(In)-25000.3(general)-24000.3(a)-24000.1(passw)]TJ 686 0 TD 0 Tc [(ord)-21999.8(a)0(lgorithm)-23999.8(w)-0.2(hatev)]TJ 801 0 TD 0.0001 Tc [(er)-23999.9(its)-23999.4(cost)]TJ -1487 100 TD 0 Tc (should)Tj 269 0 TD (execute)Tj 302.9998 0 TD 0.0001 Tc (with)Tj 194 0 TD -0.0001 Tc (near)Tj 190.0002 0 TD 0 Tc (optimal)Tj 309.9998 0 TD (eciency)Tj 363.0002 0 TD (in)Tj 102 0 TD (an)Tj 85.9995 0 TD (y)Tj -1816.9995 98.9995 TD [(setting)-23000(i)0(n)-23000(w)-0.2(hic)]TJ 524 0 TD [(h)-21999.8(i)0(t)-24000.2(s)0.2(ees)-22000.2(legitimate)-21999.8(use)-23999.8(while)-23000.5(o)0(ering)]TJ -524 100 TD [(little)-30000(opp)-1999.8(ortunit)]TJ 588 0 TD [(y)-30000(f)0(or)-29000(sp)-1999.8(eedup)-30000(i)0(n)-29000(o)0.2(ther)-29000(con)]TJ 966 0 TD (texts )Tj 244 0 TD (It)Tj -1798 100 TD [(should)-31999.8(rely)]TJ 437 0 TD (hea)Tj 122.9998 0 TD [(vily)-32000(on)]TJ 286.0002 0 TD [(a)-32000(C)0.2(PUs)-32000(fast)-32000(instructions)]TJ -846 99 TD -0.0001 Tc (for)Tj 144 0 TD 0 Tc (instance)Tj 339 0 TD (addition)Tj 371.9998 0 TD 0.0001 Tc (bit)Tj 99 0 TD (wise)Tj 197.0002 0 TD 0 Tc (exclusiv)Tj 285 0 TD 0.0001 Tc (eor)Tj 209 0 TD 0 Tc (shifts)Tj -1645 100.0005 TD [(and)-22000(memory)-21000(access)-21000(to)-22000.2(state)-22000(t)-0.2(hat)-22999.8(ts)-22000(i)0(n)-22999.8(a)-21000(pro)-2000(cessors)]TJ 0 100 TD 0.0001 Tc [(rst)-27999.7(lev)]TJ 274 0 TD -0.0001 Tc [(el)-27000.1(cac)]TJ 201 0 TD 0 Tc (he )Tj 142.9998 0 TD [(Ideally)-27999.8(these)-27999.8(op)-2000.2(erations)-27000(should)-27000(all)]TJ -617.9998 98.9998 TD [(b)-1999.8(e)-22000.2(p)-1999.8(ortably)-20000.2(accessible)-21000(from)-20999.8(highlev)]TJ 1283 0 TD [(el)-20000(languages)-19000(lik)]TJ 540 0 TD (e)Tj -1823 100 TD [(C)-31000.2(so)-30000.2(as)-31000.2(to)-29999.8(minimize)-32000(the)-31000(b)-2000.2(enet)-32000(o)0.2(f)-31000.2(handco)-2000.5(ded)-30000(as)]TJ 0 99 TD (sem)Tj 137 0 TD [(bly)-32000(language)-30000(i)0.2(mplemen)]TJ 842.9998 0 TD (tations )Tj 323 0 TD (Con)Tj 146.0002 0 TD (v)Tj 42 0 TD (ersely)Tj 200 0 TD 30.9995 Tc [(t)30999(h)30999.5(e)]TJ -1691 100 TD 0 Tc [(algorithm)-27999.8(s)-0.2(hould)-29000(a)]TJ 684.9998 0 TD (v)Tj 42.0002 0 TD -0.0001 Tc [(oid)-28000.1(o)-0.3(p)-2000.1(erations)-28000.1(l)-0.1(ik)]TJ 633 0 TD [(e)-29000.1(bit)-30000.1(transp)-2000.6(o)-0.1()]TJ -1360 100 TD [(sition)-26000.3(on)-27000.3(whic)]TJ 503.9998 0 TD 0 Tc [(h)-26000.2(c)0(ustomized)-25999.8(hardw)]TJ 725 0 TD [(are)-25000(enjo)]TJ 285.0002 0 TD [(ys)-25000(a)-26000(large)]TJ -1514 99 TD (adv)Tj 127 0 TD (an)Tj 86 0 TD (tage )Tj -213 200 TD (A)Tj 96.9998 0 TD 0.0001 Tc (passw)Tj 212.0002 0 TD -0.0001 Tc (ord)Tj 153 0 TD 0 Tc (function)Tj 332 0 TD (should)Tj 270 0 TD 0.0001 Tc (also)Tj 173 0 TD 0 Tc (not)Tj 154.9998 0 TD (lend)Tj 186.0002 0 TD (itself)Tj 208 0 TD -0.0005 Tc (to)Tj -1786 99 TD -0.0002 Tc (an)Tj 85.9998 0 TD 0 Tc [(y)-29000.2(k)0.2(ind)-29000(o)-0.2(f)-30000(pip)-2000(elined)-29999.8(hardw)]TJ 942 0 TD [(are)-27000(implemen)]TJ 487.0002 0 TD (tation )Tj 283 0 TD (It)Tj -1798 100 TD (should)Tj 283 0 TD 2 Tc [(pe)2000.2(r)1999.8(m)2000(i)2000.2(t)]TJ 290 0 TD 0 Tc (relativ)Tj 231.9998 0 TD (ely)Tj 150 0 TD 0.0001 Tc (little)Tj 219.0002 0 TD 0 Tc [(sp)-1999.8(eedup)]TJ 341 0 TD (from)Tj 216 0 TD (an)Tj 85.9995 0 TD (y)Tj -1816.9995 99.0002 TD [(kind)-18999.8(of)-18000(precomputationfor)-17000(instance)-20000(hashing)-17999.5()]TJ 0 100 TD -0.0001 Tc (passw)Tj 212 0 TD 0 Tc [(ords)-22000(with)-24000.2(the)-25000(same)-22999.8(salt)-24000(and)-24000(h)-0.2(ashing)-22999.5(one)-24000.5(p)0(ass)]TJ -212 100 TD (w)Tj 58 0 TD [(ord)-23999.8(under)-25000.2()0.2()-23000.2(salts)-25000.2(s)0.2(hould)-25000.2(eac)]TJ 1155 0 TD [(h)-24000(cost)-24999.8()-23000(times)]TJ -1213 99 TD [(more)-27000(than)-28000.2(hashing)-26000(a)-28000(single)-27000(passw)]TJ 1219 0 TD -0.0001 Tc (ord )Tj /T5 1 Tf -1219 300.9998 TD 0 Tc ()Tj 167.9998 0 TD (Eksblo)Tj 324 0 TD (wsh)Tj 286 0 TD (Algorithm)Tj /T6 1 Tf -777.9998 234 TD (W)Tj 77.9998 0 TD 29.0002 Tc [(en)29000.2(o)]TJ 152 0 TD 0 Tc [(w)-27000(d)-0.2(escrib)-2000(e)-28000(a)-27999.8(cost)-26999.8(parameterizable)-26000(and)-28000(salted)]TJ -229.9998 100.0001 TD [(blo)-2000(c)]TJ 147.9998 0 TD (k)Tj 78.0002 0 TD (cipher)Tj 255 0 TD 0.0001 Tc (that)Tj 186.9998 0 TD 0 Tc (w)Tj 58.0002 0 TD (e)Tj 70.9998 0 TD 0.0001 Tc (call)Tj /T7 1 Tf 158 0 TD 0 Tc (eksblow sh)Tj /T6 1 Tf 425 0 TD 0.0001 Tc (for)Tj 134.0002 0 TD [(exp)-1999.4(ensiv)]TJ 310 0 TD 0 Tc (e)Tj -1824 99 TD (k)Tj 41.9998 0 TD (ey)Tj 118 0 TD (sc)Tj 68 0 TD 0.0001 Tc (hedule)Tj 272.0002 0 TD 0 Tc (blo)Tj 108.9998 0 TD 0.0001 Tc (wsh )Tj 273.0002 0 TD 0 Tc (Eksblo)Tj 243 0 TD (wsh)Tj 220.9998 0 TD 0.0002 Tc (is)Tj 93.0002 0 TD 0 Tc (designed)Tj 347 0 TD -0.0005 Tc (to)Tj -1786 100 TD -0.0001 Tc (tak)Tj 115.9998 0 TD 0 Tc (e)Tj 76 0 TD 0.0001 Tc (userc)Tj 212 0 TD (hosen)Tj 241.0002 0 TD 0 Tc (passw)Tj 212 0 TD -0.0001 Tc (ords)Tj 191 0 TD -0.0002 Tc (as)Tj 113 0 TD 0 Tc (k)Tj 41.9998 0 TD (eys)Tj 153.0002 0 TD (and)Tj 173 0 TD 0.0001 Tc (resist)Tj 230 0 TD 0 Tc (at)Tj -1759 100 TD -0.0001 Tc (tac)Tj 109 0 TD -0.0002 Tc (ks)Tj 110 0 TD (on)Tj 121 0 TD 0 Tc (those)Tj 223 0 TD (k)Tj 41.9998 0 TD 0.0001 Tc (eys )Tj 191.0002 0 TD 0 Tc (As)Tj 129 0 TD -0.0001 Tc (its)Tj 120.9998 0 TD 0 Tc (base)Tj 191.0002 0 TD (w)Tj 58 0 TD (e)Tj 70.9998 0 TD 0.0001 Tc (use)Tj 149.0002 0 TD -0.0003 Tc (the)Tj 149 0 TD 0 Tc (blo)Tj 109 0 TD (w)Tj -1773 99 TD -0.0001 Tc (sh)Tj 167.9998 0 TD 0.0001 Tc ( )Tj 106.0002 0 TD 0 Tc ()Tj 66 0 TD -0.0001 Tc [(blo)-2000.1(c)]TJ 148 0 TD 0 Tc (k)Tj 86 0 TD (cipher)Tj 264 0 TD (b)Tj 44 0 TD (y)Tj 87 0 TD -0.0002 Tc (Sc)Tj 81 0 TD 0 Tc (hneier)Tj 289.9998 0 TD 0.0001 Tc (whic)Tj 164.0002 0 TD 0 Tc (h)Tj 88.9995 0 TD 0.0005 Tc (is)Tj 99 0 TD 0 Tc (w)Tj 58.0005 0 TD (ell)Tj -1750 100 TD [(established)-27000(and)-28000(has)-26999.8(b)-2000.2(een)-28000(fairly)-27000(w)]TJ 1206 0 TD [(ell)-27000(a)-0.2(nalyzed )]TJ -1206 199 TD (Blo)Tj 121.9998 0 TD [(wsh)-22000(is)-23000(a)-21999.8()-0.2(bit)-22000.2(blo)-2000(c)]TJ 733 0 TD [(k)-23000(c)0(ipher)-22999.8(structured)-23000(as)-22000.5(a)-22000()]TJ -854.9998 100 TD -0.0001 Tc [(round)-18000.3(F)]TJ 277.9998 0 TD 0.0001 Tc [(eistel)-18999.9(net)]TJ 317.0002 0 TD 0 Tc (w)Tj 57.9998 0 TD -0.0001 Tc [(ork)-18000.1( )-0.3()]TJ 243 0 TD 0.0002 Tc ( )Tj 80.0002 0 TD 0 Tc [(It)-19000(uses)-18000()-18000.2(bit)-18000(subk)]TJ 748 0 TD 0.0001 Tc (eys)Tj /T8 1 Tf -1724 99 TD 0 Tc (P)Tj /T11 1 Tf 53 12 TD ( )Tj /T8 1 Tf 37.9998 -12 TD 14 Tc [( )-13000( P)]TJ /T11 1 Tf 251 12 TD 0.0002 Tc ( )Tj /T6 1 Tf 71.0002 -12 TD 0 Tc ()Tj 64.9998 0 TD 0.0001 Tc (whic)Tj 164 0 TD 0 Tc (h)Tj 85.0002 0 TD (it)Tj 94.9998 0 TD (deriv)Tj 181 0 TD (es)Tj 109.0002 0 TD (from)Tj 208 0 TD (the)Tj 155 0 TD (encryption)Tj -1475 100 TD (k)Tj 41.9998 0 TD (ey)Tj 74 0 TD ( )Tj 73.0002 0 TD (The)Tj 176 0 TD (subk)Tj 167 0 TD [(eys)-31000(are)-32000(kno)]TJ 419 0 TD [(wn)-31000(collectiv)]TJ 433 0 TD [(ely)-32000(a)0(s)-31000(the)]TJ /T7 1 Tf 390 0 TD -0.0005 Tc (P)Tj -1774 100 TD 0 Tc (A)Tj 59.9998 0 TD 0.0002 Tc (rr)Tj 66.0002 0 TD -0.0002 Tc (ay)Tj /T6 1 Tf 82 0 TD 0 Tc ( )Tj -208 199 TD (Blo)Tj 121.9998 0 TD [(wsh)-30000.2(encrypts)-31000(b)]TJ 598.0002 0 TD [(y)-31000(s)0.2(plitting)-32000(a)-31000.2()0.2(bit)-29999.8(input)]TJ 948.9995 0 TD 0.0003 Tc [(blo)-1999.7(c)]TJ 148 0 TD 0 Tc (k)Tj ET endstream endobj 33 0 obj << /ProcSet [/PDF /Text ] /Font << /T5 8 0 R /T6 9 0 R /T7 10 0 R /T8 19 0 R /T11 25 0 R /T12 26 0 R >> /ExtGState << /GS1 11 0 R >> >> endobj 35 0 obj << /Length 26919 >> stream 0 0 0 RG 0 J 0 j 0.282 w 10 M []0 d /GS1 gs 1 i 263.927 611.46 m 263.927 605.814 l 151.012 594.523 l 151.012 617.106 m 151.012 605.814 l 263.927 594.523 l S BT /TT2 1 Tf 9.0332 0 0 9.0332 190.5321 509.8366 Tm 0 0 0 rg 0 Tc 0 Tw (Ciphertext)Tj ET q 0 792.06 612 -792 re 139.833 544.84 m 144.35 543.711 l 139.833 542.582 l 145.931 542.582 l 145.931 544.84 l W n 117.137 543.711 m 145.366 543.711 l S Q 139.833 544.84 m 144.35 543.711 l 139.833 542.582 l S q 0 792.06 612 -792 re 252.748 544.84 m 257.265 543.711 l 252.748 542.582 l 258.846 542.582 l 258.846 544.84 l W n 230.052 543.711 m 258.281 543.711 l S Q 252.748 544.84 m 257.265 543.711 l 252.748 542.582 l S q 0 792.06 612 -792 re 193.468 618.235 m 197.984 617.106 l 193.468 615.977 l 199.565 615.977 l 199.565 618.235 l W n 151.012 628.397 m 151.012 617.106 l 199.001 617.106 l S Q 193.468 618.235 m 197.984 617.106 l 193.468 615.977 l 263.927 673.563 m 263.927 673.563 l h 263.927 667.918 m 263.927 662.272 l 151.012 650.98 l S q 0 792.06 612 -792 re 252.748 674.693 m 257.265 673.563 l 252.748 672.434 l 258.846 672.434 l 258.846 674.693 l W n 215.938 673.563 m 258.281 673.563 l S Q 252.748 674.693 m 257.265 673.563 l 252.748 672.434 l S q 0 792.06 612 -792 re 252.748 618.235 m 257.265 617.106 l 252.748 615.977 l 258.846 615.977 l 258.846 618.235 l W n 215.938 617.106 m 258.281 617.106 l S Q 252.748 618.235 m 257.265 617.106 l 252.748 615.977 l S 1 1 1 rg 173.595 605.814 67.749 -11.292 re f 151.012 583.231 m 151.012 594.523 l 151.012 583.231 l f q 0 792.06 612 -792 re 152.141 588.764 m 151.012 584.248 l 149.883 588.764 l 149.883 582.667 l 152.141 582.667 l W n 151.012 594.523 m 151.012 583.231 l S Q 152.141 588.764 m 151.012 584.248 l 149.883 588.764 l S q 0 792.06 612 -792 re 152.141 554.89 m 151.012 550.373 l 149.883 554.89 l 149.883 548.792 l 152.141 548.792 l W n 151.012 571.94 m 151.012 549.357 l S Q 152.141 554.89 m 151.012 550.373 l 149.883 554.89 l S q 0 792.06 612 -792 re 193.468 561.778 m 197.984 560.648 l 193.468 559.519 l 199.565 559.519 l 199.565 561.778 l W n 151.012 560.648 m 199.001 560.648 l S Q 193.468 561.778 m 197.984 560.648 l 193.468 559.519 l S q 0 792.06 612 -792 re 265.056 571.827 m 263.927 567.31 l 262.798 571.827 l 262.798 565.73 l 265.056 565.73 l W n 263.927 594.523 m 263.927 566.294 l S Q 265.056 571.827 m 263.927 567.31 l 262.798 571.827 l S q 0 792.06 612 -792 re 252.748 561.778 m 257.265 560.648 l 252.748 559.519 l 258.846 559.519 l 258.846 561.778 l W n 215.938 560.648 m 258.281 560.648 l S Q 252.748 561.778 m 257.265 560.648 l 252.748 559.519 l S q 0 792.06 612 -792 re 265.056 554.89 m 263.927 550.373 l 262.798 554.89 l 262.798 548.792 l 265.056 548.792 l W n 263.927 555.003 m 263.927 549.357 l S Q 265.056 554.89 m 263.927 550.373 l 262.798 554.89 l 151.012 538.065 m 151.012 526.774 l 263.927 526.774 l 263.927 538.065 l S q 0 792.06 612 -792 re 208.599 712.971 m 207.469 708.454 l 206.34 712.971 l 206.34 706.873 l 208.599 706.873 l W n 207.469 721.552 m 207.469 707.438 l S Q 208.599 712.971 m 207.469 708.454 l 206.34 712.971 l S q 0 792.06 612 -792 re 208.599 523.838 m 207.469 519.321 l 206.34 523.838 l 206.34 517.741 l 208.599 517.741 l W n 207.469 526.774 m 207.469 518.305 l S Q 208.599 523.838 m 207.469 519.321 l 206.34 523.838 l S BT 9.0332 0 0 9.0332 105.8458 687.6779 Tm 0 0 0 rg (P1)Tj 0 -6.25 TD (P2)Tj -0.625 -6.25 TD (P16)Tj 12.5 -3.75 TD (P17)Tj -12.5 0 TD (P18)Tj 10 20.625 TD (Plaintext)Tj -4.0625 -1.875 TD [(32 bit)-7381.8(32 bit)]TJ 0 -20 TD [(32 bit)-7381.8(32 bit)]TJ 6.25 20 TD (64 bit)Tj 0 -21.25 TD (64 bit)Tj 2.5 17.5 TD (32 bit)Tj -8.75 0 TD (32 bit)Tj -3.4375 1.875 TD (32 bit)Tj 9.0625 -2.5 TD (F)Tj 0 -6.25 TD (F)Tj T* (F)Tj ET q 0 792.06 612 -792 re 139.833 691.63 m 144.35 690.501 l 139.833 689.372 l 145.931 689.372 l 145.931 691.63 l W n 117.137 690.501 m 145.366 690.501 l S Q 139.833 691.63 m 144.35 690.501 l 139.833 689.372 l S q 0 792.06 612 -792 re 139.833 635.172 m 144.35 634.043 l 139.833 632.914 l 145.931 632.914 l 145.931 635.172 l W n 117.137 634.043 m 145.366 634.043 l S Q 139.833 635.172 m 144.35 634.043 l 139.833 632.914 l S q 0 792.06 612 -792 re 139.833 578.715 m 144.35 577.586 l 139.833 576.457 l 145.931 576.457 l 145.931 578.715 l W n 117.137 577.586 m 145.366 577.586 l S Q 139.833 578.715 m 144.35 577.586 l 139.833 576.457 l S q 0 792.06 612 -792 re 193.468 674.693 m 197.984 673.563 l 193.468 672.434 l 199.565 672.434 l 199.565 674.693 l W n 151.012 684.855 m 151.012 673.563 l 199.001 673.563 l S Q 193.468 674.693 m 197.984 673.563 l 193.468 672.434 l 151.012 673.563 m 151.012 662.272 l 263.927 650.98 l 269.586 673.56 m 269.586 670.444 267.056 667.914 263.94 667.914 c 260.824 667.914 258.294 670.444 258.294 673.56 c 258.294 676.677 260.824 679.206 263.94 679.206 c 267.056 679.206 269.586 676.677 269.586 673.56 c h 263.927 679.209 m 263.927 667.918 l 258.281 673.563 m 269.573 673.563 l 199.001 622.752 16.937 -11.292 re S q 0 792.06 612 -792 re 152.141 645.222 m 151.012 640.705 l 149.883 645.222 l 149.883 639.124 l 152.141 639.124 l W n 151.012 650.98 m 151.012 639.689 l S Q 152.141 645.222 m 151.012 640.705 l 149.883 645.222 l 269.586 617.16 m 269.586 614.044 267.056 611.514 263.94 611.514 c 260.824 611.514 258.294 614.044 258.294 617.16 c 258.294 620.276 260.824 622.806 263.94 622.806 c 267.056 622.806 269.586 620.276 269.586 617.16 c h 263.927 622.752 m 263.927 611.46 l 258.281 617.106 m 269.573 617.106 l 156.666 577.56 m 156.666 574.444 154.136 571.914 151.02 571.914 c 147.904 571.914 145.374 574.444 145.374 577.56 c 145.374 580.677 147.904 583.206 151.02 583.206 c 154.136 583.206 156.666 580.677 156.666 577.56 c h 151.012 583.231 m 151.012 571.94 l 145.366 577.586 m 156.658 577.586 l 199.001 566.294 16.937 -11.292 re S q 0 792.06 612 -792 re 265.056 628.285 m 263.927 623.768 l 262.798 628.285 l 262.798 622.187 l 265.056 622.187 l W n 263.927 650.98 m 263.927 622.752 l S Q 265.056 628.285 m 263.927 623.768 l 262.798 628.285 l 269.586 560.64 m 269.586 557.524 267.056 554.994 263.94 554.994 c 260.824 554.994 258.294 557.524 258.294 560.64 c 258.294 563.756 260.824 566.286 263.94 566.286 c 267.056 566.286 269.586 563.756 269.586 560.64 c h 263.927 566.294 m 263.927 555.003 l 258.281 560.648 m 269.573 560.648 l 156.666 543.72 m 156.666 540.604 154.136 538.074 151.02 538.074 c 147.904 538.074 145.374 540.604 145.374 543.72 c 145.374 546.836 147.904 549.366 151.02 549.366 c 154.136 549.366 156.666 546.836 156.666 543.72 c h 151.012 549.357 m 151.012 538.065 l 145.366 543.711 m 156.658 543.711 l 269.586 543.72 m 269.586 540.604 267.056 538.074 263.94 538.074 c 260.824 538.074 258.294 540.604 258.294 543.72 c 258.294 546.836 260.824 549.366 263.94 549.366 c 267.056 549.366 269.586 546.836 269.586 543.72 c h 263.927 549.357 m 263.927 538.065 l 258.281 543.711 m 269.573 543.711 l S q 0 792.06 612 -792 re 265.056 684.742 m 263.927 680.225 l 262.798 684.742 l 262.798 678.645 l 265.056 678.645 l h 152.141 701.679 m 151.012 697.163 l 149.883 701.679 l 149.883 695.582 l 152.141 695.582 l W n 151.012 696.146 m 151.012 707.438 l 263.927 707.438 l 263.927 679.209 l S Q 152.141 701.679 m 151.012 697.163 l 149.883 701.679 l 265.056 684.742 m 263.927 680.225 l 262.798 684.742 l 151.012 639.689 m 151.012 628.397 l S BT 9.0332 0 0 9.0332 173.5948 597.3458 Tm (13 More Iterations)Tj ET 156.666 634.08 m 156.666 630.964 154.136 628.434 151.02 628.434 c 147.904 628.434 145.374 630.964 145.374 634.08 c 145.374 637.196 147.904 639.726 151.02 639.726 c 154.136 639.726 156.666 637.196 156.666 634.08 c h 145.366 634.043 m 156.658 634.043 l 156.666 690.48 m 156.666 687.364 154.136 684.834 151.02 684.834 c 147.904 684.834 145.374 687.364 145.374 690.48 c 145.374 693.596 147.904 696.126 151.02 696.126 c 154.136 696.126 156.666 693.596 156.666 690.48 c h 151.012 696.146 m 151.012 684.855 l 145.366 690.501 m 156.658 690.501 l 199.001 679.209 16.937 -11.292 re S BT /T6 1 Tf 0.12 0 0 -0.12 72 484.74 Tm 0 g 0.0001 Tc [(Figure)-23999.8()]TJ 359 0 TD (Blo)Tj 122 0 TD 0 Tc [(wsh)-23000(F)]TJ 255 0 TD [(eistel)-25000(net)]TJ 323 0 TD (w)Tj 58 0 TD 0.0001 Tc [(ork)-22999.9(with)-24999.8(F)-24999.9(b)-1999.9(e)0.3(ing)-24999.9(t)0.1(he)]TJ -1117 100 TD 0 Tc (F)Tj 46.9999 0 TD (eistel)Tj 223.0001 0 TD (function)Tj 359.9999 0 TD (using)Tj 227 0 TD 0.0001 Tc (only)Tj 192.0001 0 TD 0 Tc [(mo)-2000(dular)]TJ 339.9999 0 TD (addition)Tj 336.9999 0 TD (and)Tj -1725.9999 98.9998 TD (X)Tj 60.0001 0 TD (OR )Tj -60.0001 224 TD 0.0001 Tc (in)Tj 67.0001 0 TD -0.0001 Tc (to)Tj 121 0 TD 0 Tc (t)Tj 29.9999 0 TD (w)Tj 58.0001 0 TD (o)Tj 88.9999 0 TD (bit)Tj 260.0001 0 TD (halv)Tj 153 0 TD -0.0001 Tc (es)Tj /T8 1 Tf 144.9999 0 TD 0 Tc (L)Tj /T11 1 Tf 57.0001 12 TD ()Tj /T6 1 Tf 83.9999 -12 TD (and)Tj /T8 1 Tf 182 0 TD (R)Tj /T11 1 Tf 62.9999 12 TD ()Tj /T6 1 Tf 37.0001 -12 TD ( )Tj 120.0001 0 TD (The)Tj 191 0 TD -0.0001 Tc (most)Tj -1657.0001 100 TD 0 Tc (signican)Tj 336 0 TD [(t)-29000.1(h)0.1(alf)]TJ /T8 1 Tf 249 0 TD (L)Tj /T11 1 Tf 57 12 TD ()Tj /T6 1 Tf 37 -12 TD 30 Tc [(i)30000(s)1000(X)]TJ 198 0 TD 0 Tc [(ORed)-29000(with)-29999.9(subk)]TJ 595.9999 0 TD 0.0002 Tc (ey)Tj /T8 1 Tf 110 0 TD 0 Tc (P)Tj /T11 1 Tf 53.0002 12 TD ()Tj /T6 1 Tf 37 -12 TD 29.9998 Tc [(a)29999.6(n)30000(d)]TJ -1673.0001 100 TD 0 Tc [(used)-32000(as)-30999.9(input)]TJ 526 0 TD [(for)-31000(a)]TJ 205.0001 0 TD (function)Tj /T8 1 Tf 328.9999 0 TD (F)Tj /T6 1 Tf 65 0 TD ( )Tj 73 0 TD [(The)-32000(result)-32000(o)0(f)-32000(t)0(hat)]TJ -1198 99 TD (function)Tj 338.0001 0 TD -0.0001 Tc (is)Tj 95.9999 0 TD 0 Tc (X)Tj 60.0001 0 TD (ORed)Tj 247.9999 0 TD (with)Tj 202 0 TD (the)Tj 155.0001 0 TD (leastsignican)Tj 531 0 TD (t)Tj 70.9998 0 TD 0.0001 Tc (half)Tj /T8 1 Tf -1700.9999 100 TD 0 Tc (R)Tj /T11 1 Tf 63.0001 12 TD ()Tj /T6 1 Tf 36.9999 -12 TD ( )Tj 107.0001 0 TD (The)Tj 185.9999 0 TD (t)Tj 30.0001 0 TD (w)Tj 57.9999 0 TD (o)Tj 84 0 TD (halv)Tj 153 0 TD (es)Tj 112 0 TD 0.0001 Tc (are)Tj 154 0 TD 0 Tc (then)Tj 204 0 TD (sw)Tj 91 0 TD [(app)-1999.9(e)0.2(d)]TJ 289.0001 0 TD (and)Tj 176.9998 0 TD 0.0001 Tc (the)Tj -1744.9999 100 TD 0 Tc (whole)Tj 243 0 TD 0.0001 Tc [(pro)-1999.9(c)0.2(ess)]TJ 297 0 TD 0 Tc [(rep)-2000(eated)]TJ 347.0001 0 TD (another)Tj 312 0 TD -0.0001 Tc ()Tj 117.9999 0 TD 0 Tc (times)Tj 230.0001 0 TD -0.0001 Tc (for)Tj 135 0 TD 0 Tc (a)Tj 76.9998 0 TD (to)Tj -1758.9999 99 TD [(tal)-27999.9(o)-0.1(f)-28999.9()-0.1()-27000(i)0.1(terations )]TJ 737 0 TD 0.0001 Tc (Th)Tj 104 0 TD 0 Tc [(us)-28000(for)-28000.1()]TJ /T12 1 Tf 324 0 TD ()Tj /T8 1 Tf 90.0001 0 TD (i)Tj /T12 1 Tf 52.9999 0 TD ()Tj /T6 1 Tf 89 0 TD [()-28000(letting)]TJ /T12 1 Tf 397.9999 0 TD ()Tj /T6 1 Tf -1794.9999 100 TD [(denote)-28000.1(X)]TJ 327.9999 0 TD 0.0001 Tc (OR)Tj /T8 1 Tf 181.0001 152 TD 0 Tc (R)Tj /T9 1 Tf 63.0001 12 TD (i)Tj /T6 1 Tf 110.9999 -12 TD ()Tj /T8 1 Tf 147 0 TD (L)Tj /T9 1 Tf 57.0001 12 TD (i)Tj /T10 1 Tf 22.9999 0 TD ()Tj /T11 1 Tf 52.0001 0 TD ( )Tj /T12 1 Tf 56 -12 TD ()Tj /T8 1 Tf 82.9999 0 TD (P)Tj /T9 1 Tf 53 12 TD (i)Tj /T8 1 Tf 28 -12 TD ( )Tj -665.9999 124 TD (L)Tj /T9 1 Tf 56.9999 12 TD (i)Tj /T6 1 Tf 110 -12 TD ()Tj /T8 1 Tf 147 0 TD (R)Tj /T9 1 Tf 63.0001 12 TD (i)Tj /T10 1 Tf 22.9999 0 TD ()Tj /T11 1 Tf 52.0001 0 TD ( )Tj /T12 1 Tf 56.9999 -12 TD ()Tj /T8 1 Tf 83 0 TD (F)Tj /T6 1 Tf 65 0 TD ()Tj /T8 1 Tf 32.0001 0 TD (R)Tj /T9 1 Tf 63 12 TD (i)Tj /T6 1 Tf 26.9999 -12 TD ()Tj /T8 1 Tf 32 0 TD ()Tj /T6 1 Tf -1327 152.0002 TD [(After)-30000.1()-29000.1(rounds)-30000(t)0.1(he)-30000(t)]TJ 806.0001 0 TD (w)Tj 57.9999 0 TD 29 Tc [(oh)28999.9(a)29000.1(l)29000(v)]TJ 224 0 TD 0 Tc [(es)-28000.1(are)-28999.9(s)0(w)]TJ 330.0001 0 TD [(app)-2000(ed)-29000(again)]TJ -1418.0001 98.9998 TD [(undoing)-25000.1(the)-25000(e)-0.1(ect)-24999.9(of)-25000(the)-25000(th)-24000(sw)]TJ 1213 0 TD [(ap)-25000(and)-24999.8(eac)]TJ 441.0001 0 TD 24 Tc [(hh)24000.2(a)23999.8(l)24000(f)]TJ -1654.0001 100 TD 0.0001 Tc [(is)-26999.8(X)]TJ 143 0 TD 0 Tc [(ORed)-28000(with)-28000.1(another)-27000(bit)-25999.9(subk)]TJ 1137.0001 0 TD (ey)Tj /T8 1 Tf -726.0001 152.0002 TD (R)Tj /T11 1 Tf 63 12 TD 0.0001 Tc ( )Tj /T6 1 Tf 153 -12 TD 0 Tc ()Tj /T8 1 Tf 148.0001 0 TD (L)Tj /T11 1 Tf 57 12 TD -0.0001 Tc ( )Tj /T12 1 Tf 87.9999 -12 TD 0 Tc ()Tj /T8 1 Tf 83 0 TD (P)Tj /T11 1 Tf 53.0001 12 TD -0.0001 Tc ( )Tj /T8 1 Tf 70.9999 -12 TD 0 Tc ( )Tj -710 124 TD (L)Tj /T11 1 Tf 57 11.9999 TD 0.0001 Tc ( )Tj /T6 1 Tf 153 -11.9999 TD 0 Tc ()Tj /T8 1 Tf 148.0001 0 TD (R)Tj /T11 1 Tf 63 11.9999 TD -0.0001 Tc ( )Tj /T12 1 Tf 87.9999 -11.9999 TD 0 Tc ()Tj /T8 1 Tf 83 0 TD (P)Tj /T11 1 Tf 53.0001 11.9999 TD -0.0001 Tc ( )Tj /T8 1 Tf 70.9999 -11.9999 TD 0 Tc ()Tj /T6 1 Tf -1276 151.9999 TD [(This)-27999.9(pro)-2000(c)0(ess)-25999.9(i)0(s)-27000(illustrated)-28000(graphically)-26000.1(in)-28000(Figure)-26999.8()-0.2( )]TJ 0 199 TD (The)Tj 206 0 TD (function)Tj /T8 1 Tf 360.0001 0 TD (F)Tj /T6 1 Tf 128 0 TD -0.0001 Tc (in)Tj 131.9999 0 TD 0 Tc (Blo)Tj 122 0 TD (wsh)Tj 247 0 TD (uses)Tj 211 0 TD 0.0001 Tc (four)Tj 208.9999 0 TD (arra)Tj 148.0002 0 TD -0.0001 Tc (ys)Tj /T8 1 Tf -1763.0001 100 TD 0 Tc (S)Tj /T11 1 Tf 51.0001 12 TD ( )Tj /T8 1 Tf 37 -12 TD 14 Tc [( )-13999.9( S)]TJ /T11 1 Tf 250 12 TD 0 Tc ()Tj /T6 1 Tf 37 -12 TD ()Tj 55.9999 0 TD (deriv)Tj 181 0 TD [(ed)-31000(from)-32000(the)]TJ 463 0 TD [(encryption)-30999.8(k)]TJ 458.9999 0 TD (ey)Tj 74 0 TD ( )Tj 73.0002 0 TD (Eac)Tj 133.9998 0 TD (h)Tj -1814.9999 100 TD 0.0001 Tc (arra)Tj 148.0001 0 TD 0 Tc (y)Tj 82.9999 0 TD 0.0001 Tc (con)Tj 123.0001 0 TD 0 Tc (tains)Tj 215.9999 0 TD ()Tj 166 0 TD (bit)Tj 254 0 TD (w)Tj 58 0 TD (ords )Tj 253 0 TD (The)Tj 185.0001 0 TD (arra)Tj 147.9998 0 TD (ys)Tj 115.0002 0 TD -0.0001 Tc (act)Tj -1749.0001 99 TD 0 Tc [(as)-27999.9(substitution)-29999.9(b)-2000(o)]TJ 655 0 TD [(xes)-28000.1(or)]TJ /T7 1 Tf 245.0001 0 TD -0.0001 Tc (Sb)Tj 110.9999 0 TD 0.0001 Tc (oxes)Tj /T6 1 Tf 153 0 TD 0 Tc [()-29000(r)-0.1(eplacing)-28000(an)-28000(bit)]TJ -1164 100 TD (input)Tj 227.9999 0 TD (with)Tj 196.0001 0 TD (a)Tj 76.0001 0 TD (bit)Tj 245.9999 0 TD (output )Tj /T8 1 Tf 325 0 TD (F)Tj /T6 1 Tf 99 0 TD (splits)Tj 224 0 TD (its)Tj 122.9999 0 TD (bit)Tj 246.0002 0 TD -0.0001 Tc (in)Tj -1763.0001 99.0001 TD 0.0001 Tc [(put)-29999.9(i)0.2(n)]TJ 221 0 TD 0 Tc [(to)-30000(four)-29000(bit)-30000(b)]TJ 524 0 TD (ytes)Tj /T8 1 Tf 199 0 TD (a)Tj /T6 1 Tf 44 0 TD ()Tj /T8 1 Tf 53 0 TD (b)Tj /T6 1 Tf 36 0 TD ()Tj /T8 1 Tf 53.0001 0 TD (c)Tj /T6 1 Tf 35.9999 0 TD 30 Tc [(a)29999.9(n)30000.1(d)]TJ /T8 1 Tf 217 0 TD 0 Tc (d)Tj /T6 1 Tf 43 0 TD 31 Tc [(w)31000.2(i)30999.8(t)31000.2(h)]TJ /T8 1 Tf 244.9999 0 TD 0 Tc (a)Tj /T6 1 Tf 74 0 TD 0.0001 Tc (the)Tj -1744.9999 100 TD 0 Tc [(most)-31000(signican)]TJ 543 0 TD 31.0001 Tc (tb)Tj 107.0001 0 TD 0 Tc (yte )Tj 184 0 TD [(It)-32000(replaces)-30000(eac)]TJ 525.9999 0 TD 31.0001 Tc (hb)Tj 121.0001 0 TD 0 Tc [(yte)-31999.8(b)]TJ 188.9998 0 TD 31 Tc [(yt)31000(h)30999.8(e)]TJ -1669.9999 99.9999 TD 0.0001 Tc (con)Tj 123.0001 0 TD 0 Tc (ten)Tj 112.9999 0 TD (ts)Tj 100 0 TD -0.0001 Tc (of)Tj 102.0001 0 TD (an)Tj 123.9999 0 TD 0 Tc [(Sb)-2000(o)]TJ 162 0 TD (x)Tj 104.0001 0 TD -0.0001 Tc (and)Tj 168.9998 0 TD 0.0001 Tc (com)Tj 146.0002 0 TD 0 Tc (bines)Tj 219.9999 0 TD (the)Tj 150.9999 0 TD (results)Tj 272.0002 0 TD -0.0002 Tc (as)Tj -1786.0001 99.0001 TD 0 Tc (follo)Tj 153 0 TD (ws)Tj 152 0 TD (Letting)Tj /T16 1 Tf 292.0001 0 TD ( )Tj /T6 1 Tf 91.9999 0 TD [(signify)-26999.9(addition)-28000(m)0(o)-2000(d)0.1(ulo)-27000()]TJ /T11 1 Tf 930.0001 -30.0001 TD -0.0002 Tc ()Tj /T6 1 Tf 69.9998 30.0001 TD 0 Tc ()Tj /T8 1 Tf -1595.9999 151.9999 TD (F)Tj /T6 1 Tf 65 0 TD ()Tj /T8 1 Tf 32 0 TD [(a )-14000(b )-14000(c )-14000(d)]TJ /T6 1 Tf 270 0 TD 23 Tc ()Tj /T13 1 Tf 143.0001 -67.0001 TD 0 Tc ()Tj /T6 1 Tf 37.9999 67.0001 TD ()Tj /T8 1 Tf 32 0 TD (S)Tj /T11 1 Tf 51 12.0001 TD ( )Tj /T6 1 Tf 37 -12.0001 TD ( )Tj /T8 1 Tf 23.0001 0 TD (a)Tj /T6 1 Tf 44 0 TD ()Tj /T16 1 Tf 41.9999 0 TD ( )Tj /T8 1 Tf 83 0 TD (S)Tj /T11 1 Tf 51 12.0001 TD ()Tj /T6 1 Tf 37 -12.0001 TD ( )Tj /T8 1 Tf 23 0 TD (b)Tj /T6 1 Tf 36 0 TD ()Tj /T12 1 Tf 73 0 TD ()Tj /T8 1 Tf 83.0001 0 TD (S)Tj /T11 1 Tf 50.9999 12.0001 TD ()Tj /T6 1 Tf 38 -12.0001 TD ( )Tj /T8 1 Tf 23.0001 0 TD (c)Tj /T6 1 Tf 35.9999 0 TD ()Tj /T13 1 Tf 23 -67.0001 TD ()Tj /T16 1 Tf 55.9999 67.0001 TD ( )Tj /T8 1 Tf 83 0 TD (S)Tj /T11 1 Tf 51.0002 12.0001 TD ()Tj /T6 1 Tf 37 -12.0001 TD ( )Tj /T8 1 Tf 22.9998 0 TD (d)Tj /T6 1 Tf 43 0 TD ()Tj /T8 1 Tf 23.0002 0 TD ()Tj /T6 1 Tf 475 -5247 TD (EksBlo)Tj 256 0 TD [(wshSetup)-26000.2()]TJ /T7 1 Tf 450 0 TD (c)Tj 34 0 TD (ost)Tj /T6 1 Tf 104 0 TD ()Tj /T7 1 Tf 50.9998 0 TD 0.0001 Tc (salt)Tj /T6 1 Tf 125 0 TD 0 Tc ()Tj /T7 1 Tf 51 0 TD (key)Tj /T6 1 Tf 123 0 TD ()Tj /T7 1 Tf -1111 99.0005 TD (state)Tj /T12 1 Tf 204.0002 0 TD ( )Tj /T6 1 Tf 109.9998 0 TD 0.0001 Tc [(InitState)-28999.7()]TJ /T7 1 Tf -314 100 TD 0 Tc (state)Tj /T12 1 Tf 204.0002 0 TD ( )Tj /T6 1 Tf 109.9998 0 TD [(ExpandKey)-26999.8()]TJ /T7 1 Tf 486 0 TD 0.0001 Tc (state)Tj /T6 1 Tf 170.0002 0 TD 0 Tc ()Tj /T7 1 Tf 50 0 TD -0.0001 Tc (salt)Tj /T6 1 Tf 125 0 TD 0 Tc ()Tj /T7 1 Tf 51 0 TD (key)Tj /T6 1 Tf 123 0 TD ()Tj /T17 1 Tf -1319.0002 100 TD 0.0001 Tc [(rep)-2999.7(e)-0.1(at)]TJ /T6 1 Tf 294 0 TD 0 Tc ()Tj /T18 1 Tf 74 -30.0005 TD (c)Tj 29.0002 0 TD (ost)Tj /T6 1 Tf 95 30.0005 TD ()Tj /T7 1 Tf -409 98.9995 TD (state)Tj /T12 1 Tf 203.9998 0 TD ( )Tj /T6 1 Tf 110.0002 0 TD [(ExpandKey)-27000()]TJ /T7 1 Tf 486 0 TD (state)Tj /T6 1 Tf 170 0 TD 27 Tc [()27000()]TJ /T7 1 Tf 143 0 TD 0 Tc (salt)Tj /T6 1 Tf 133 0 TD ()Tj /T7 1 Tf -1246 100 TD (state)Tj /T12 1 Tf 203.9998 0 TD ( )Tj /T6 1 Tf 110.0002 0 TD [(ExpandKey)-27000()]TJ /T7 1 Tf 486 0 TD (state)Tj /T6 1 Tf 170 0 TD 27 Tc [()27000()]TJ /T7 1 Tf 143 0 TD 0 Tc (key)Tj /T6 1 Tf 123 0 TD ()Tj /T17 1 Tf -1319.0002 100 TD (return)Tj /T7 1 Tf 293 0 TD (state)Tj /T6 1 Tf -583.9998 395 TD [(Figure)-21000.2()0.2()]TJ 354.9998 0 TD 0.0001 Tc (Eksblo)Tj 243.0002 0 TD 0 Tc [(wsh)-21000(exp)-2000(ensiv)]TJ 539 0 TD 21 Tc (ek)Tj 100 0 TD 0.0001 Tc [(ey)-21999.7(sc)]TJ 170.9998 0 TD 0 Tc [(hedule)-21000(blo)]TJ 365.0002 0 TD (w)Tj -1773 99 TD 0.0001 Tc (sh)Tj 181 0 TD -0.0002 Tc (is)Tj 89 0 TD 0 Tc [(a)-30999.8(cost)]TJ 249 0 TD [(parameterizable)-29999.8(and)]TJ 775 0 TD [(salted)-32000(v)]TJ 284 0 TD (ariation)Tj -1578 100 TD -0.0001 Tc [(of)-28000.3(the)-28000.3(blo)]TJ 346.9998 0 TD 0.0001 Tc [(wsh)-26999.7(blo)-1999.9(c)]TJ 360.0002 0 TD 0 Tc [(k)-26999.8(c)0(ipher )]TJ -707 265 TD (Eksblo)Tj 242.9998 0 TD 0.0001 Tc (wsh)Tj 220.0002 0 TD 0 Tc (encrypts)Tj 343 0 TD (iden)Tj 150 0 TD (tically)Tj 259.9998 0 TD 0.0002 Tc (to)Tj 110.0002 0 TD -0.0001 Tc (Blo)Tj 122 0 TD 0 Tc (wsh )Tj 268.9995 0 TD 0.0003 Tc (The)Tj -1716.9995 100 TD 0 Tc (t)Tj 29.9998 0 TD (w)Tj 58.0002 0 TD [(o)-22999.8(d)-0.2(ier)-24000(in)-24000(the)-25000(functions)-24000(they)-24000(use)-24000(t)0(o)-24000(t)0.2(ransform)-22000(en)]TJ -88 99 TD (cryption)Tj 338 0 TD (k)Tj 41.9998 0 TD 0.0001 Tc (eys)Tj 149 0 TD 0.0002 Tc (in)Tj 67.0002 0 TD -0.0002 Tc (to)Tj 108.9998 0 TD 0 Tc (subk)Tj 167 0 TD (eys)Tj 148.0002 0 TD (and)Tj 169.9998 0 TD 0.0001 Tc [(Sb)-1999.9(o)]TJ 162 0 TD 0 Tc (xes )Tj 197.0002 0 TD (Figure)Tj 268.9995 0 TD ()Tj -1817.9995 100 TD (sk)Tj 75 0 TD (etc)Tj 103.9998 0 TD 0.0001 Tc (hes)Tj /T7 1 Tf 154.0002 0 TD 0 Tc (EksBlow shSetup)Tj /T6 1 Tf 626.9998 0 TD ()Tj 67.0002 0 TD -0.0001 Tc (the)Tj 154 0 TD 0 Tc (algorithm)Tj 390 0 TD (used)Tj 201 0 TD (b)Tj 44 0 TD (y)Tj -1816 100 TD (eksblo)Tj 222.9998 0 TD 0.0001 Tc (wsh )Tj /T7 1 Tf 259.0002 0 TD 0 Tc (EksBlow shSetup)Tj /T6 1 Tf 666 0 TD [(has)-32000(three)-31999.5(i)-0.5(nput)]TJ 596.9995 0 TD 0.0003 Tc (pa)Tj -1744.9995 99 TD 0 Tc (rameters)Tj 377 0 TD [(a)-28999.8(c)0(ost)-29000.2(a)-28000(s)0.2(alt)-29999.8(and)-28000(t)0(he)-29999.8(encryption)-27999.5(k)]TJ 1283 0 TD (ey)Tj 74 0 TD ( )Tj 64 0 TD (It)Tj -1798 100 TD [(returns)-24999.8(a)-25000.2(set)-25000(o)-0.2(f)-25999.8(s)0(ubk)]TJ 739 0 TD [(eys)-24000(and)-26000.2(Sb)-1999.8(o)]TJ 460 0 TD [(xes)-25000(also)-24000(kno)]TJ 455.9995 0 TD 0.0003 Tc [(wn)-24999.7(as)]TJ -1654.9995 100 TD 0 Tc (a)Tj /T7 1 Tf 69 0 TD [(key)-30999.8(sche)]TJ 295 0 TD -0.0001 Tc (dule)Tj /T6 1 Tf 145.9998 0 TD 0 Tc ( )Tj -509.9998 199 TD [(The)-27000(cost)-26999.8(parameter)-26000.2(con)]TJ 861 0 TD -0.0001 Tc [(trols)-25000.3(h)-0.1(o)]TJ 274 0 TD 0 Tc [(w)-27000(e)0.2(xp)-2000.2(ensiv)]TJ 397 0 TD [(e)-26000(the)-28000(k)]TJ 247.9995 0 TD (ey)Tj -1779.9995 99 TD (sc)Tj 67.9998 0 TD [(hedule)-30000.2(is)-30000(to)-29999.8(compute )]TJ 831.0002 0 TD [(The)-30000.2(s)0.2(alt)-30000(i)0.2(s)-30000(a)-29000.2(bit)-29000(v)]TJ 813 0 TD (alue)Tj -1712 100 TD [(that)-25000(mo)-2000(dies)-25000.2(the)-26000(k)]TJ 683 0 TD [(ey)-24000(sc)]TJ 173 0 TD [(hedule)-24000(so)-24999.8(that)-24999.8(the)-25000(same)-25000(k)]TJ 923.9995 0 TD (ey)Tj -1779.9995 100 TD [(need)-31999.8(not)]TJ 350 0 TD (alw)Tj 122.9998 0 TD (a)Tj 40.0002 0 TD [(ys)-30000(pro)-1999.8(d)-0.2(uce)-32000(t)-0.2(he)-32000(same)-31000(result)]TJ 1047 0 TD [(as)-31000(moti)]TJ -1560 98.9998 TD (v)Tj 39 0 TD [(ated)-31000(b)]TJ 232 0 TD 0.0001 Tc [(y)-30999.9(S)0.3(ection)-30999.7( )]TJ 481.9998 0 TD 0 Tc (Finally)Tj 248.0002 0 TD 31.9998 Tc [(t)31999.6(h)32000(e)-0.2(k)]TJ 244 0 TD 0 Tc [(ey)-30000(argumen)]TJ 423.9995 0 TD 30.0005 Tc [(ti)30000.5(s)-999(a)]TJ -1668.9995 100 TD 0 Tc (secret)Tj 244 0 TD (encryption)Tj 420.9998 0 TD (k)Tj 42.0002 0 TD (ey)Tj 74 0 TD ()Tj 59.9998 0 TD 0.0001 Tc (whic)Tj 164 0 TD 0 Tc (h)Tj 82.0002 0 TD -0.0001 Tc (can)Tj 161 0 TD 1.9998 Tc (be)Tj 121 0 TD 0 Tc (a)Tj 76.9998 0 TD (userc)Tj 212.0002 0 TD (hosen)Tj -1658 100.0002 TD -0.0001 Tc (passw)Tj 212 0 TD 24 Tc [(o)24000.2(r)23999.8(d)2000.2(o)24000(fu)24000.2(pt)24000(o)23999.8(b)]TJ 600 0 TD -0.0001 Tc [(ytes)-23000.1(including)-25000.3(a)-23000.1(terminating)]TJ -812 98.9998 TD 0.0001 Tc [(zero)-25999.9(b)]TJ 219 0 TD 0 Tc [(yte)-27999.8(when)-28000.2(the)-28000.2(k)]TJ 543 0 TD [(ey)-27000(is)-26999.8(an)-26999.8(ASCI)-1999.8(I)-29000(s)-0.2(tring )]TJ /T7 1 Tf -762 199 TD (EksBlow shSetup)Tj /T6 1 Tf 652 0 TD [(b)-2000(e)0(gins)-19000(b)]TJ 292 0 TD 0.0001 Tc [(y)-17999.9(c)0.3(alling)]TJ /T7 1 Tf 316 0 TD 0 Tc (InitState)Tj /T6 1 Tf 315 0 TD 0.0001 Tc [()-19999.4(a)-18000.4(func)]TJ -1575 100 TD 0 Tc [(tion)-24000(that)-25000(copies)-23000(the)-25000(digits)-24000.2(of)-24000.2(the)-24000(n)]TJ 1222 0 TD -0.0002 Tc (um)Tj 113 0 TD 2 Tc [(be)2000(r)]TJ /T8 1 Tf 141.9998 0 TD 0 Tc ()Tj /T6 1 Tf 74.0002 0 TD 0.0001 Tc [(rst)-23999.4(in)]TJ 235 0 TD -0.0005 Tc (to)Tj -1786 100 TD -0.0001 Tc [(the)-28000.1(s)-0.3(ubk)]TJ 309.9998 0 TD 0 Tc [(eys)-27000(then)-28000(in)]TJ 420 0 TD [(to)-27000(the)-28000.2(Sb)-1999.8(o)]TJ 406.0002 0 TD 0.0001 Tc (xes )Tj /T7 1 Tf -1136 199 TD 0 Tc (Exp)Tj 133 0 TD (andKeystate)Tj 548 0 TD (salt)Tj 195 0 TD -0.0001 Tc (key)Tj /T6 1 Tf 194.9998 0 TD 0 Tc [(mo)-2000(dies)]TJ 338.0002 0 TD -0.0001 Tc (the)Tj 156 0 TD 0.0001 Tc (PArra)Tj 252.9995 0 TD 0 Tc (y)Tj -1817.9995 100 TD [(and)-31999.8(S)-0.2(b)-2000(o)]TJ 327.9998 0 TD (xes)Tj 146.0002 0 TD 0.0001 Tc [(based)-31999.7(on)-31999.7(the)]TJ 503.9998 0 TD 0 Tc (v)Tj 39 0 TD -0.0001 Tc (alue)Tj 180.0002 0 TD 0.0001 Tc [(of)-31999.7(the)]TJ 247 0 TD -0.0001 Tc [(bit)-31000.1(s)-0.6(alt)]TJ -1444 99.0002 TD 0.0001 Tc [(and)-31999.7(t)0.1(he)]TJ 314 0 TD 0 Tc (v)Tj 38.9998 0 TD [(ariable)-30999.8(length)]TJ 536.0002 0 TD (k)Tj 42 0 TD (ey)Tj 73.9998 0 TD ( )Tj 74 0 TD [(First)-32000(it)]TJ 295.0002 0 TD (X)Tj 60 0 TD [(ORs)-32000(all)-31999.5(t)-0.5(he)]TJ -1434 99.9999 TD 0.0001 Tc (subk)Tj 166.9998 0 TD 0 Tc [(eys)-20000.2(in)-20000(the)-21000.2(Parra)]TJ 592 0 TD [(y)-17000.2(w)0.2(ith)-21000.2(the)-21000.2(e)0(ncryption)-20000(k)]TJ 827.0002 0 TD (ey)Tj 74 0 TD ( )Tj 56.9995 0 TD 0.0003 Tc (The)Tj -1716.9995 99.0001 TD 0 Tc [(rst)-23999.8()-23000.2(bits)-24000(of)-24000(the)-25000(k)]TJ 706 0 TD -0.0001 Tc [(ey)-23000.1(are)-23000.3(X)]TJ 298.9998 0 TD 0 Tc [(ORed)-24000.2(with)]TJ /T8 1 Tf 418.0002 0 TD (P)Tj /T11 1 Tf 53 11.9999 TD ( )Tj /T6 1 Tf 38 -11.9999 TD 0.0002 Tc [()-23999.8(t)0.7(he)-24999.8(next)]TJ -1514 99.9999 TD -0.0002 Tc ()Tj 117.9998 0 TD 0.0001 Tc (bits)Tj 169.0002 0 TD 0 Tc (with)Tj /T8 1 Tf 196 0 TD (P)Tj /T11 1 Tf 53 12.0001 TD ()Tj /T6 1 Tf 38 -12.0001 TD ()Tj 59.9998 0 TD (and)Tj 168.0002 0 TD -0.0002 Tc (so)Tj 109 0 TD 0 Tc (on )Tj 169.9998 0 TD 0.0001 Tc (The)Tj 178 0 TD 0 Tc (k)Tj 42.0002 0 TD (ey)Tj 114.9998 0 TD 0.0002 Tc (is)Tj 90.0002 0 TD 0 Tc (view)Tj 161.9995 0 TD (ed)Tj 118.0005 0 TD (as)Tj -1786 100 TD 1.9998 Tc [(be)1999.8(i)1999.6(n)2000(g)]TJ 233 0 TD 0 Tc (cyclic)Tj 266 0 TD -0.0001 Tc (when)Tj 226 0 TD (the)Tj 152 0 TD 0 Tc [(pro)-2000(cess)]TJ 299 0 TD 0.0001 Tc (reac)Tj 147 0 TD 0 Tc (hes)Tj 151 0 TD (the)Tj 153 0 TD (end)Tj 165.9995 0 TD 0.0005 Tc (of)Tj -1792.9995 99 TD -0.0001 Tc [(the)-27000.1(k)]TJ 184 0 TD 0 Tc (ey)Tj 74 0 TD [()-27000(i)0(t)-27000(s)0.2(tarts)-26000(r)0.2(eusing)-26000(bits)-26999.8(from)-27000.2(the)-27000.2(b)-1999.8(eginning)-27000.5(to)]TJ -258 100 TD (X)Tj 59.9998 0 TD [(OR)-27000(with)-28000.2(subk)]TJ 509.0002 0 TD (eys )Tj -569 199 TD (Subsequen)Tj 378.9998 0 TD (tly)Tj 92.0002 0 TD ()Tj /T7 1 Tf 99 0 TD -0.0001 Tc (Exp)Tj 132.9998 0 TD 0 Tc (andKey)Tj /T6 1 Tf 347.0002 0 TD (blo)Tj 108.9998 0 TD (wshencrypts)Tj 585.9998 0 TD 0.0003 Tc (the)Tj -1744.9995 100 TD 0.0001 Tc (rst)Tj 177.9998 0 TD [()-31999.9(bits)]TJ 284.0002 0 TD -0.0002 Tc (of)Tj 101 0 TD -0.0001 Tc (its)Tj 121.9998 0 TD 0.0001 Tc (salt)Tj 164.0002 0 TD 0 Tc (argumen)Tj 313 0 TD 32 Tc [(tu)32000(s)32000.2(i)32000(n)31999.8(g)]TJ 288 0 TD 0 Tc (the)Tj 149 0 TD (curren)Tj 230 0 TD (t)Tj -1829 98.9999 TD [(state)-30000(of)-31000(the)-31000(k)]TJ 491.9998 0 TD 0.0001 Tc [(ey)-29999.9(sc)]TJ 179.0002 0 TD 0 Tc (hedule )Tj 303 0 TD [(The)-31000.2(r)0(esulting)-29999.8(c)0(iphertext)]TJ -974 100 TD [(replaces)-18000.2(s)0(ubk)]TJ 472.9998 0 TD (eys)Tj /T8 1 Tf 133.0002 0 TD (P)Tj /T11 1 Tf 52.9998 12.0001 TD ( )Tj /T6 1 Tf 57 -12.0001 TD (and)Tj /T8 1 Tf 154.0002 0 TD (P)Tj /T11 1 Tf 53 12.0001 TD ()Tj /T6 1 Tf 36.9998 -12.0001 TD ( )Tj 58 0 TD [(That)-19000(same)-19999.8(ciphertext)-19000(is)]TJ -1017.9998 100 TD -0.0001 Tc [(also)-23000.3(X)]TJ 222.9998 0 TD 0 Tc [(ORed)-25000.2(with)-25000(the)-25000(s)0.2(econd)-23000.2(bits)-23999.8(o)-0.2(f)-23999.8(salt)-25000(and)-24999.5(the)]TJ -222.9998 99.0001 TD [(result)-19000(e)0(ncrypted)-19000.2(with)-20000.2(the)-20000(n)-0.2(ew)-18999.8(state)-19000.2(o)0.2(f)-19000.2(t)0.2(he)-20000(k)]TJ 1536 0 TD -0.0003 Tc [(ey)-19000.3(sc)]TJ 168 0 TD 0 Tc (hed)Tj -1704 100 TD (ule )Tj 181 0 TD (The)Tj 176 0 TD (output)Tj 276.9998 0 TD 0.0002 Tc (of)Tj 100 0 TD 0.0001 Tc (the)Tj 148.0002 0 TD 0 Tc [(second)-31999.8(encryption)-32000(replaces)]TJ ET endstream endobj 36 0 obj << /ProcSet [/PDF /Text ] /Font << /TT2 37 0 R /T6 9 0 R /T7 10 0 R /T8 19 0 R /T9 20 0 R /T10 21 0 R /T11 25 0 R /T12 26 0 R /T13 27 0 R /T16 38 0 R /T17 39 0 R /T18 40 0 R >> /ExtGState << /GS1 11 0 R >> >> endobj 42 0 obj << /Length 20353 >> stream BT /T6 1 Tf 0.12 0 0 -0.12 72 723.9 Tm 0 g /GS1 gs 0 Tc 0 Tw (subk)Tj 167.0001 0 TD (eys)Tj /T8 1 Tf 140.9999 0 TD (P)Tj /T11 1 Tf 53 11.9995 TD ()Tj /T6 1 Tf 67 -11.9995 TD 0.0001 Tc (and)Tj /T8 1 Tf 162 0 TD 0 Tc (P)Tj /T11 1 Tf 53 11.9995 TD ()Tj /T6 1 Tf 37 -11.9995 TD ( )Tj 63 0 TD [(It)-29000.1(is)-28000.1(also)-27000(X)]TJ 402 0 TD [(ORed)-29000(with)-28000.2(the)-28999.8(rst)]TJ -1145 100 TD [(bits)-27999.9(o)-0.1(f)-29000(s)0.1(alt)-29000(and)-28000(encrypted)-29000(t)-0.1(o)-29000.1(r)0.1(eplace)]TJ /T8 1 Tf 1463.9999 0 TD (P)Tj /T11 1 Tf 53 11.9995 TD ()Tj /T6 1 Tf 67 -11.9995 TD 0.0001 Tc (and)Tj /T8 1 Tf 162 0 TD 0 Tc (P)Tj /T11 1 Tf 53.0002 11.9995 TD ()Tj /T6 1 Tf 38 -11.9995 TD ( )Tj -1837.0001 99 TD [(The)-24000.1(p)0(ro)-2000(cess)-22999.9(con)]TJ 576 0 TD 0.0001 Tc (tin)Tj 99.0001 0 TD 0 Tc [(ues)-24000(alternating)-24000(b)-2000(e)0(t)]TJ 699.9999 0 TD (w)Tj 58 0 TD 0.0001 Tc [(een)-23999.7(t)0.1(he)-23999.7(rst)]TJ -1433 100 TD 0 Tc [(and)-30000(s)0.1(econd)-29000()0()-29000.1(b)0.1(its)-30000(salt )]TJ 908 0 TD (When)Tj /T7 1 Tf 244 0 TD (Exp)Tj 133 0 TD (andKey)Tj /T6 1 Tf 310.9999 0 TD (nishes)Tj -1595.9999 100 TD [(replacing)-26000(en)]TJ 436 0 TD [(tries)-27000(in)-27999.9(the)-28000(P)-0.1(Arra)]TJ 678 0 TD (y)Tj 37 0 TD 26 Tc [(i)26000(t)-2000(c)26000(o)25999.9(n)]TJ 255 0 TD -0.0001 Tc (tin)Tj 99.0001 0 TD 0 Tc [(ues)-27000(o)0.2(n)-27000.2(r)0.2(e)]TJ -1505.0001 99 TD [(placing)-23999.9(Sb)-1999.9(o)]TJ 445 0 TD 25 Tc [(xe)25000(n)]TJ 150 0 TD 0 Tc [(tries)-24000(t)]TJ 212 0 TD (w)Tj 58 0 TD [(o)-25000(a)-0.1(t)-25000(a)-23999.9(time )]TJ 453.0001 0 TD [(After)-25000(replacing)]TJ -1318.0001 100 TD (the)Tj 149.9999 0 TD 0.0001 Tc (last)Tj 165.0001 0 TD 0 Tc (t)Tj 30.0001 0 TD (w)Tj 57.9999 0 TD (o)Tj 75.0001 0 TD (en)Tj 81 0 TD (tries)Tj 193 0 TD (of)Tj 101.0001 0 TD (the)Tj 149.9998 0 TD (last)Tj 165.0002 0 TD -0.0001 Tc [(Sb)-2000.1(o)]TJ 162 0 TD 0 Tc (x)Tj /T8 1 Tf 102.9999 0 TD (S)Tj /T11 1 Tf 51.0001 11.9995 TD ()Tj /T6 1 Tf 36.9998 -11.9995 TD ( )Tj 205 0 TD (and)Tj /T8 1 Tf -1725.9999 99 TD (S)Tj /T11 1 Tf 51.0001 11.9995 TD ()Tj /T6 1 Tf 37 -11.9995 TD ( )Tj /T7 1 Tf 222 0 TD -0.0001 Tc (Exp)Tj 132.9999 0 TD 0 Tc (andKey)Tj /T6 1 Tf 308 0 TD [(returns)-27000(the)-28000.1(new)-28000(k)]TJ 643 0 TD 0.0001 Tc [(ey)-26999.7(sc)]TJ 175.9999 0 TD 0 Tc (hedule )Tj -1569.9999 200 TD [(In)-31000.1(computing)]TJ /T7 1 Tf 521 0 TD (Exp)Tj 133 0 TD (andKeystate)Tj 537 0 TD ()Tj 101 0 TD (key)Tj /T6 1 Tf 150 0 TD ()Tj 55.9999 0 TD 31 Tc [(ab)30999.8(l)31000.2(o)29000(c)]TJ 221.0002 0 TD 30 Tc [(ko)30000(f)]TJ -1719.0001 99 TD 0 Tc [()-26000()-27000(bits)-27000(is)-27000(used)-27000(instead)-27000(of)-27000(the)-27999.9(salt )]TJ 1366 0 TD [(This)-28000.2(i)0(s)-26999.8(equiv)]TJ -1366 100 TD (alen)Tj 146 0 TD (t)Tj 64.0001 0 TD [(to)-32000(a)-31999.9(s)-0.1(ingle)-32000(iteration)]TJ 758.0001 0 TD -0.0001 Tc [(of)-32000.1(the)]TJ 246.9999 0 TD (standard)Tj 352.0001 0 TD 0 Tc (blo)Tj 108.9998 0 TD -0.0001 Tc (wsh)Tj -1675.9999 100 TD 0 Tc (k)Tj 42.0001 0 TD 0.0001 Tc [(ey)-26999.8(sc)]TJ 175.9999 0 TD 0 Tc (hedule )Tj 295 0 TD [(The)-27999.9(call)-27000(to)]TJ /T7 1 Tf 424.0001 0 TD -0.0001 Tc (Exp)Tj 132.9999 0 TD 0 Tc [(andKeystate)-30999.8()-31000(salt)]TJ /T6 1 Tf -1070 99 TD [(simply)-28000(treats)-27000(the)-28000(salt)-27000(as)-27000(a)-27000(b)]TJ 1129 0 TD 0.0001 Tc [(yte)-25999.9(k)]TJ 181 0 TD 0 Tc (ey)Tj 73.9999 0 TD ( )Tj -1383.9999 198.9995 TD [(After)-20000(calling)]TJ /T7 1 Tf 464 0 TD (InitState)Tj /T6 1 Tf 340 0 TD [(to)-20000(ll)-20000(a)-19000(new)-20000(k)]TJ 472 0 TD -0.0001 Tc [(ey)-19000.1(sc)]TJ 168 0 TD 0 Tc [(hedule)-20000(with)]TJ -1444 100 TD (the)Tj 149.9999 0 TD (digits)Tj 233.0001 0 TD 0.0001 Tc (of)Tj /T8 1 Tf 101 0 TD 0 Tc ()Tj /T6 1 Tf 50 0 TD ()Tj /T7 1 Tf 60.0001 0 TD (EksBlow shSetup)Tj /T6 1 Tf 667 0 TD (calls)Tj /T7 1 Tf 192 0 TD (Exp)Tj 133 0 TD (andKey)Tj /T6 1 Tf -1586.0001 100 TD (with)Tj 199 0 TD (the)Tj 152.0001 0 TD (salt)Tj 166.9999 0 TD 0.0001 Tc (and)Tj 171 0 TD 0 Tc (k)Tj 42.0001 0 TD -0.0001 Tc (ey)Tj 73.9999 0 TD 0 Tc ( )Tj 88.0001 0 TD -0.0001 Tc (This)Tj 198.9999 0 TD 0 Tc (ensures)Tj 301.0001 0 TD (that)Tj 189 0 TD (all)Tj 125 0 TD -0.0001 Tc (sub)Tj -1707.0001 99 TD 0 Tc (sequen)Tj 241.0001 0 TD (t)Tj 69.9999 0 TD (state)Tj 215 0 TD [(dep)-2000(e)-0.1(nds)]TJ 332 0 TD 0.0001 Tc (on)Tj 127 0 TD 0 Tc [(b)-2000(oth)]TJ 233.0001 0 TD -0.0001 Tc (and)Tj 171.9999 0 TD 0 Tc (that)Tj 191.0001 0 TD -0.0002 Tc (no)Tj 126.9998 0 TD 0.0001 Tc (part)Tj -1707.9999 100.0005 TD 0 Tc [(of)-28000(the)-28000(algorithm)-27000(can)-28000(b)-2000(e)-28000(precomputed)-28000(without)-29000(b)-1999.8(o)-0.2(th)]TJ 0 100 TD [(salt)-30000(and)-30999.9(k)]TJ 367 0 TD 0.0001 Tc (ey)Tj 74.0001 0 TD 0 Tc ( )Tj 68.9999 0 TD (Thereafter)Tj /T7 1 Tf 436 0 TD (Exp)Tj 133 0 TD (andKey)Tj /T6 1 Tf 304 0 TD [(is)-30999.9(alternately)]TJ -1383 98.9998 TD [(called)-22000(w)0(ith)-22000(t)0.1(he)-22000(salt)-22000(and)-22000(then)-22000(k)]TJ 1083 0 TD -0.0001 Tc [(ey)-22000.2(for)-21000.2()]TJ /T18 1 Tf 266.0001 -29.9998 TD 0 Tc (c)Tj 28.9999 0 TD (ost)Tj /T6 1 Tf 116.9999 29.9998 TD (iterations )Tj -1494.9999 100 TD (F)Tj 46.9999 0 TD 0.0001 Tc (or)Tj 109.0001 0 TD 0 Tc (all)Tj 123.0001 0 TD (but)Tj 159.0001 0 TD (the)Tj 150.9999 0 TD (rst)Tj 178 0 TD (in)Tj 67.0001 0 TD (v)Tj 41.9999 0 TD 2 Tc [(oc)2000(a)1999.9(t)2000(i)2000.1(o)2000(n)]TJ 300 0 TD 0.0001 Tc (of)Tj /T7 1 Tf 102 0 TD 0 Tc (Exp)Tj 133.0001 0 TD (andKey)Tj /T6 1 Tf 272.9998 0 TD ()Tj 61 0 TD 0.0001 Tc (the)Tj -1744.9999 99 TD 0 Tc [(second)-23999.9(argumen)]TJ 578.0001 0 TD 22.9999 Tc [(ti)22999.8(s)-1000(a)-1000.1(b)22999.8(l)23000(o)20999.9(c)]TJ 348.9999 0 TD 0 Tc [(k)-24000(o)-0.1(f)-23999.9()0.1()-23000()-24000(bits )]TJ 567.0001 0 TD [(This)-24000(more)]TJ -1494.0001 100 TD [(closely)-24000(r)0.1(esem)]TJ 470 0 TD [(bles)-23000(the)-25000.1(original)-23000(blo)]TJ 707.9999 0 TD 0.0001 Tc [(wsh)-24000(k)]TJ 251.0001 0 TD [(ey)-23999.7(sc)]TJ 172.9999 0 TD 0 Tc (hedule)Tj -1601.9999 100 TD [(and)-17999.9(a)-0.1(lso)-18000.1(a)0.1(llo)]TJ 438.0001 0 TD -0.0001 Tc (ws)Tj /T7 1 Tf 109.9999 0 TD 0 Tc (EksBlow shSetup)Tj /T6 1 Tf 652 0 TD [(to)-19000.1(b)-1999.9(e)-18000(implemen)]TJ 544.0001 0 TD (ted)Tj -1744.0001 99 TD [(more)-24999.9(ecien)]TJ 453 0 TD [(tly)-26000.1(on)-25000(CPU)-26000(arc)]TJ 553.0001 0 TD [(hitectures)-24000.1(with)-26000(few)-25999.8(reg)]TJ -1006.0001 100 TD (isters )Tj 0 199 TD (W)Tj 78 0 TD [(e)-29000.1(h)0.1(op)-1999.9(e)-30000.1(that)-29000.1(t)0.1(he)-29000(unpredictable)-29000(and)-29000(c)]TJ 1315.0001 0 TD [(hanging)-27999.8(con)]TJ -1393.0001 100 TD (ten)Tj 113.0001 0 TD [(t)-26999.9(o)-0.1(f)-28000.1(t)0.1(he)-26999.9(Parra)]TJ 528.9999 0 TD [(y)-24000(and)-27000(SBo)]TJ 402 0 TD [(xes)-25000(will)-28000(reduce)-26000(the)-27999.8(a)-0.2(p)]TJ -1044 99.0002 TD (plicabilit)Tj 316.0001 0 TD 23.9999 Tc [(yo)23999.9(f)-1000.1(y)]TJ 201.9999 0 TD 0 Tc [(et)-24000(unkno)]TJ 315 0 TD [(wn)-23999.9(optimizations )]TJ 679.0001 0 TD (Addition)Tj -1512.0001 100 TD 0.0001 Tc (ally)Tj 168 0 TD 0 Tc (the)Tj /T7 1 Tf 153 0 TD (eksblow sh)Tj /T6 1 Tf 433 0 TD (SBo)Tj 173 0 TD (xes)Tj 149 0 TD (require)Tj 289 0 TD ()Tj 79 0 TD (KB)Tj 160.0001 0 TD -0.0002 Tc (of)Tj 103.9998 0 TD -0.0001 Tc (con)Tj -1707.9999 100 TD 0 Tc (stan)Tj 151.0001 0 TD -0.0001 Tc (tly)Tj 132.9999 0 TD 0 Tc (accessed)Tj 336 0 TD (and)Tj 169 0 TD [(mo)-2000(died)]TJ 346 0 TD (memory)Tj 287 0 TD ( )Tj 79.9999 0 TD 0.0002 Tc (Th)Tj 104.0002 0 TD 0 Tc (us)Tj 138.9998 0 TD 0.0001 Tc (the)Tj -1744.9999 99 TD 0 Tc (SBo)Tj 173.0001 0 TD (xes)Tj 153.9999 0 TD (cannot)Tj 286 0 TD 2 Tc (be)Tj 127 0 TD 0 Tc (shared)Tj 278.0001 0 TD (across)Tj 259.9999 0 TD (k)Tj 42 0 TD (ey)Tj 122 0 TD (sc)Tj 68.0001 0 TD (hedules)Tj -1510.0001 100 TD [(separate)-25999.9(SBo)]TJ 501 0 TD [(xes)-27000(m)]TJ 208 0 TD [(ust)-27000.1(exist)-28000(for)-26999.9(e)0(v)]TJ 541 0 TD -0.0001 Tc [(ery)-27000.1(s)-0.2(im)]TJ 263.9999 0 TD 0 Tc (ultaneous)Tj -1513.9999 100 TD (execution )Tj 418 0 TD [(This)-31999.9(v)]TJ 233 0 TD [(astly)-31999.9(limits)]TJ 442.0001 0 TD [(the)-32000(u)-0.1(sefulness)]TJ 539 0 TD [(of)-32000(an)]TJ 185 0 TD (y)Tj -1817.0001 99 TD (attempts)Tj 363.0001 0 TD (to)Tj 113.9999 0 TD [(pip)-2000.1(eline)]TJ 324 0 TD (the)Tj 155.0001 0 TD (F)Tj 46.9998 0 TD (eistel)Tj 225 0 TD 0.0001 Tc (net)Tj 113.0001 0 TD 0 Tc (w)Tj 58.0001 0 TD -0.0001 Tc (ork)Tj 158 0 TD 0 Tc (in)Tj 108.9998 0 TD (hard)Tj -1665.9999 100 TD (w)Tj 58 0 TD 0.0001 Tc (are )Tj /T5 1 Tf -58 299.9999 TD 0 Tc ()Tj 168 0 TD (Bcrypt)Tj 378 0 TD (Algorithm)Tj /T6 1 Tf -546 235 TD (The)Tj 189.0001 0 TD (problems)Tj 374.9999 0 TD (presen)Tj 230 0 TD (t)Tj 77 0 TD (in)Tj 116.0001 0 TD (traditional)Tj 428.9999 0 TD -0.0001 Tc (UNIX)Tj 263.0001 0 TD (pass)Tj -1679.0001 99 TD 0 Tc (w)Tj 58 0 TD [(ord)-19000.1(h)0(ashes)-20000(led)-21000(naturally)-19000(to)-21000(a)-20000(new)-20000(passw)]TJ 1405.9999 0 TD [(ord)-19000.2(s)0(c)]TJ 208.0002 0 TD (heme)Tj -1672.0001 100 TD 0.0001 Tc (whic)Tj 164.0001 0 TD 0 Tc (h)Tj 80 0 TD (w)Tj 57.9999 0 TD (e)Tj 71.0001 0 TD (call)Tj /T7 1 Tf 158.9999 0 TD (b)Tj 34.0001 0 TD (crypt)Tj /T6 1 Tf 182.9999 0 TD ()Tj 60.0001 0 TD (referring)Tj 341.9999 0 TD (to)Tj 108 0 TD 0.0001 Tc (the)Tj 149.9999 0 TD (Blo)Tj 122.0002 0 TD -0.0001 Tc (wsh)Tj 218 0 TD (en)Tj -1749.0001 100 TD 0 Tc [(cryption)-29999.9(algorithm )]TJ 751 0 TD [(Bcrypt)-30000(uses)-30000.1(a)-28999.9()-0.1(bit)-28999.8(salt)-30000(and)]TJ -751 99 TD [(encrypts)-29000.1(a)-30000(\012bit)-29000(magic)-29000(v)]TJ 974.0001 0 TD (alue )Tj 213.9999 0 TD 0.0001 Tc [(It)-30999.8(tak)]TJ 209 0 TD 0 Tc [(es)-28999.8(adv)]TJ 226.0001 0 TD -0.0002 Tc (an)Tj 85.9998 0 TD 0.0001 Tc (tage)Tj -1708.9999 100 TD 0 Tc [(of)-28000(the)-28000(e)0.1(xp)-1999.9(ensiv)]TJ 548 0 TD 27 Tc (ek)Tj 106 0 TD 0 Tc [(ey)-26000(setup)-28000(i)-0.1(n)]TJ /T7 1 Tf 426.0001 0 TD (eksblow sh)Tj /T6 1 Tf 389 0 TD ( )Tj -1469.0001 199 TD (The)Tj /T7 1 Tf 174 0 TD (b)Tj 34 0 TD (crypt)Tj /T6 1 Tf 223 0 TD [(algorithm)-29000(runs)-30999.9(i)-0.1(n)-30999.9(t)]TJ 700.0001 0 TD (w)Tj 57.9999 0 TD 0.0001 Tc [(o)-31000(p)0.2(hases)-30999.7(sk)]TJ 438.9999 0 TD (etc)Tj 104.0002 0 TD -0.0001 Tc (hed)Tj -1732.0001 100 TD 0.0001 Tc (in)Tj 108 0 TD 0 Tc (Figure)Tj 272 0 TD 0.0001 Tc ( )Tj 134 0 TD (In)Tj 114.0001 0 TD 0 Tc (the)Tj 153.9999 0 TD (rst)Tj 182 0 TD (phase)Tj /T7 1 Tf 268 0 TD (EksBlow shSetup)Tj /T6 1 Tf -1232 99 TD [(is)-30999.9(called)-31000.1(with)-30999.9(the)-32000(cost)-30999.9(the)-32000(salt)-32000(and)-31000(t)-0.1(he)-31000(passw)]TJ 1718.0001 0 TD -0.0001 Tc (ord)Tj -1718.0001 100 TD 0.0001 Tc (to)Tj 115 0 TD 0 Tc (initialize)Tj /T7 1 Tf 349 0 TD (eksblow sh)Tj /T6 1 Tf 395.0001 0 TD -0.0001 Tc (s)Tj 98.9999 0 TD 0 Tc (state )Tj 275 0 TD -0.0001 Tc (Most)Tj 223.0001 0 TD -0.0002 Tc (of)Tj 107.9998 0 TD -0.0001 Tc [(b)-2000.3(crypts)]TJ 564 -5247 TD 0.0001 Tc [(b)-1999.9(crypt)-26999.7()]TJ /T7 1 Tf 299 0 TD 0 Tc (c)Tj 34.0002 0 TD (ost)Tj /T6 1 Tf 103.9998 0 TD ()Tj /T7 1 Tf 51.0002 0 TD -0.0001 Tc (salt)Tj /T6 1 Tf 125 0 TD 0 Tc ()Tj /T7 1 Tf 51 0 TD -0.0001 Tc (pwd)Tj /T6 1 Tf 147.9998 0 TD 0 Tc ()Tj /T7 1 Tf -728.9998 99.0005 TD (state)Tj /T12 1 Tf 202.9998 0 TD ( )Tj /T6 1 Tf 111.0002 0 TD (EksBlo)Tj 256 0 TD [(wshSetup)-26000.2()]TJ /T7 1 Tf 449.9998 0 TD (c)Tj 34 0 TD 0.0001 Tc (ost)Tj /T6 1 Tf 104.0002 0 TD 0 Tc ()Tj /T7 1 Tf 51 0 TD (salt)Tj /T6 1 Tf 125 0 TD ()Tj /T7 1 Tf 51 0 TD (key)Tj /T6 1 Tf 123 0 TD ()Tj /T7 1 Tf -1508 100 TD (ctext)Tj /T12 1 Tf 205 0 TD ( )Tj /T6 1 Tf 110.9998 0 TD (OrpheanBeholderScryDoubt)Tj /T17 1 Tf -315.9998 100 TD [(rep)-3000(eat)]TJ /T6 1 Tf 293 0 TD -0.0001 Tc ()Tj /T7 1 Tf -210 98.9995 TD 0 Tc (ctext)Tj /T12 1 Tf 205 0 TD ( )Tj /T6 1 Tf 111 0 TD [(EncryptECB)-26000()]TJ /T7 1 Tf 528.9998 0 TD 0.0001 Tc (state)Tj /T6 1 Tf 170.0002 0 TD 0 Tc ()Tj /T7 1 Tf 51 0 TD -0.0002 Tc (ctext)Tj /T6 1 Tf 179 0 TD 0 Tc ()Tj /T17 1 Tf -1328 100 TD (return)Tj /T6 1 Tf 293 0 TD [(Concatenate)-27000.2()]TJ /T7 1 Tf 512 0 TD (c)Tj 33.9998 0 TD (ost)Tj /T6 1 Tf 104.0002 0 TD ()Tj /T7 1 Tf 50 0 TD -0.0001 Tc (salt)Tj /T6 1 Tf 125 0 TD 0 Tc ()Tj /T7 1 Tf 51 0 TD (ctext)Tj /T6 1 Tf 179 0 TD ()Tj -1549 395 TD [(Figure)-31000()-0.2()]TJ 375 0 TD [(The)-32000(b)-2000(crypt)-31000(algorithm)-31000(for)-30000.2(hashing)-30999.5(UNIX)]TJ -375 100 TD -0.0001 Tc (passw)Tj 212 0 TD 0 Tc [(ords)-25000.2(b)0.2(ased)-27000.2(on)-28000(eksblo)]TJ 771.9998 0 TD 0.0001 Tc (wsh )Tj -983.9998 265 TD [(time)-24999.7(is)-23999.7(sp)-1999.7(en)]TJ 427.9998 0 TD 0 Tc [(t)-25000(i)-0.2(n)-24999.8(t)-0.2(he)-25000(exp)-2000(ensiv)]TJ 601 0 TD 24 Tc (ek)Tj 103.0002 0 TD 0 Tc [(ey)-24000(sc)]TJ 172.9998 0 TD (hedule )Tj 293.0002 0 TD (F)Tj 47 0 TD (ollo)Tj 128 0 TD (w)Tj -1773 100 TD [(ing)-29999.8(t)0(hat)-32000(the)-31000()0(\012bit)-29000(v)]TJ 816.9998 0 TD [(alue)-31000(OrpheanBeholderScry)]TJ -816.9998 99 TD (Doubt)Tj 306 0 TD -0.0002 Tc (is)Tj 90 0 TD 0 Tc (encrypted)Tj 393 0 TD ()Tj 117 0 TD (times)Tj 229 0 TD (using)Tj /T7 1 Tf 224 0 TD (eksblow sh)Tj /T6 1 Tf 432 0 TD (in)Tj -1791 100 TD [(ECB)-27000(m)0(o)-2000(d)-0.2(e)-28000(w)0(ith)-28000(t)-0.2(he)-28999.8(state)-27000(f)0(rom)-28000(t)0.2(he)-27999.8(previous)-27000(phase )]TJ 0 99 TD [(The)-21000(output)-20999.8(is)-19999.8(the)-20999.8(c)0(ost)-21000.2(and)-19999.8(bit)-20000(salt)-20000(concatenated)]TJ 0 100 TD [(with)-28000(the)-28000.2(result)-27000.2(o)0.2(f)-28000.2(t)0.2(he)-28000(encryption)-27000.2(l)0(o)-2000(op )]TJ 0 199 TD -0.0002 Tc (In)Tj 125 0 TD 0 Tc (Section)Tj 311 0 TD -0.0002 Tc ()Tj 118.9998 0 TD 0 Tc (w)Tj 58.0002 0 TD (e)Tj 85 0 TD (deriv)Tj 180.9998 0 TD (ed)Tj 131.0002 0 TD -0.0001 Tc (that)Tj 201 0 TD -0.0002 Tc (an)Tj /T8 1 Tf 136 0 TD 0 Tc ()Tj /T6 1 Tf 34 0 TD (secure)Tj 298 0 TD (pass)Tj -1679 100 TD (w)Tj 58 0 TD (ord)Tj 158.9998 0 TD (function)Tj 336 0 TD (should)Tj 274.0002 0 TD (fulll)Tj 225.9998 0 TD 0.0001 Tc (sev)Tj 112 0 TD -0.0001 Tc (eral)Tj 172.0002 0 TD 0 Tc [(imp)-2000(ortan)]TJ 332.9995 0 TD (t)Tj 70.0005 0 TD (cri)Tj -1740 100 TD (teria)Tj 225 0 TD [(second)-24000(preimageresistance)-22000(a)-24000(salt)-24999.8(space)-23000(large)]TJ -225 99 TD (enough)Tj 296.9998 0 TD (to)Tj 112 0 TD (defeat)Tj 258 0 TD (precomputation)Tj 610 0 TD (attac)Tj 183.0002 0 TD (ks)Tj 140 0 TD (and)Tj 172 0 TD (an)Tj -1772 100 TD [(adaptable)-25000(cost )]TJ 583.9998 0 TD (W)Tj 78.0002 0 TD [(e)-27000(b)-2000(eliev)]TJ 274 0 TD 26 Tc [(et)26000.2(h)25999.8(a)26000(t)]TJ /T7 1 Tf 240.9998 0 TD 0 Tc (Bcrypt)Tj /T6 1 Tf 276 0 TD (ac)Tj 76.9998 0 TD 0.0001 Tc (hiev)Tj 148.0005 0 TD 0 Tc [(es)-24000(all)]TJ -1678 99 TD (three)Tj 221 0 TD -0.0001 Tc [(prop)-2000.3(erties)]TJ 425 0 TD (and)Tj 169.9998 0 TD 0.0001 Tc (that)Tj 188 0 TD 0.0002 Tc (it)Tj 92 0 TD 0.0001 Tc (can)Tj 161.0002 0 TD 1.9998 Tc (be)Tj /T8 1 Tf 121.9998 0 TD 0 Tc ()Tj /T6 1 Tf 34.0002 0 TD (secure)Tj 286 0 TD (with)Tj -1699 100 TD [(useful)-23000(v)]TJ 271.9998 0 TD [(alues)-21000(of)]TJ /T8 1 Tf 292.0002 0 TD ()Tj /T6 1 Tf 56 0 TD [(for)-20999.8(y)]TJ 163 0 TD [(ears)-21000(to)-22000(come )]TJ 504 0 TD [(Though)-22000(w)]TJ 362 0 TD 22 Tc [(ec)22000.5(a)21999.5(n)22000()]TJ -1649 100 TD 0 Tc [(not)-32000(formally)-30000.2(pro)]TJ 602 0 TD (v)Tj 42 0 TD (e)Tj /T7 1 Tf 67 0 TD (b)Tj 34 0 TD (crypt)Tj /T8 1 Tf 223 0 TD ()Tj /T6 1 Tf 34 0 TD (secure)Tj 306 0 TD (an)Tj 86 0 TD 31 Tc [(y)31000(a)]TJ 160.9995 0 TD 31.0005 Tc (ww)Tj 149.0005 0 TD 0.0001 Tc (ould)Tj -1704 98.9998 TD 0 Tc (lik)Tj 88 0 TD [(ely)-30000(deal)-31000.2(a)-31000(serious)-29000(blo)]TJ 770.9998 0 TD [(w)-31000.2(t)0(o)-30999.8(t)-0.2(he)-31000(w)]TJ 400 0 TD [(ellstudied)-31000(blo)]TJ 514.0002 0 TD (w)Tj -1773 100 TD [(sh)-28000(e)-0.2(ncryption)-27000(a)-0.2(lgorithm )]TJ /T19 1 Tf 0 216.0002 TD ( )Tj 238 0 TD (Implemen)Tj 453.9998 0 TD 0.0001 Tc (tation)Tj /T6 1 Tf -691.9998 215.9998 TD 0 Tc (W)Tj 77.9998 0 TD 20 Tc [(eh)19999.8(a)]TJ 143.0002 0 TD 0 Tc (v)Tj 42 0 TD [(e)-19000(i)0.2(mplemen)]TJ 403.9998 0 TD 0.0001 Tc (ted)Tj /T7 1 Tf 136 0 TD 0 Tc (b)Tj 34.0002 0 TD -0.0001 Tc (crypt)Tj /T6 1 Tf 211 0 TD 0 Tc [(and)-19999.8(d)-0.2(eplo)]TJ 346 0 TD (y)Tj 42 0 TD -0.0001 Tc [(ed)-19000.1(it)-20000.1(as)-20000.6(part)]TJ -1436 99 TD 0 Tc [(of)-21000.2(the)-21000.2(O)0(p)-2000(enBSD)-20999.8(op)-2000(erating)-20000(system )]TJ /T7 1 Tf 1279.9998 0 TD -0.0001 Tc (Bcrypt)Tj /T6 1 Tf 270.0002 0 TD 0 Tc [(has)-20999.5(b)-2000.5(een)]TJ -1550 100 TD [(the)-28000(d)-0.2(efault)-27999.8(passw)]TJ 633.9998 0 TD [(ord)-26000.2(s)0(c)]TJ 215.0002 0 TD [(heme)-26999.8(since)-27000(Op)-2000(enBSD)-28000( )]TJ -849 199 TD [(An)-26000(imp)-2000(ortan)]TJ 466.9998 0 TD [(t)-25000.2(requiremen)]TJ 460.0002 0 TD 24.9999 Tc [(to)24999.7(fa)25000.1(n)]TJ 235 0 TD 0 Tc (y)Tj /T7 1 Tf 69 0 TD (b)Tj 33.9998 0 TD 0.0001 Tc (crypt)Tj /T6 1 Tf 217.0002 0 TD 0 Tc (implemen)Tj -1482 100 TD (tation)Tj 250 0 TD -0.0002 Tc (is)Tj 89 0 TD -0.0001 Tc (that)Tj 186 0 TD 0 Tc (it)Tj 88 0 TD (exploit)Tj 280 0 TD -0.0001 Tc (the)Tj 148.9998 0 TD 0.0001 Tc (full)Tj 151 0 TD 0 Tc [(bit)-32000(s)0(alt)]TJ 449.9998 0 TD 0.0001 Tc (space )Tj -1642.9995 99 TD 0 Tc [(Op)-2000(enBSD)-26000(generates)-23999.8(the)-25000()0.2(bit)]TJ /T7 1 Tf 1173 0 TD (b)Tj 34 0 TD (crypt)Tj /T6 1 Tf 216 0 TD [(salt)-25000(from)-25000(an)]TJ -1423 100.0001 TD (arcfour)Tj 297.9998 0 TD ()Tj /T7 1 Tf 32 0 TD (ar)Tj 73 0 TD 0.0001 Tc (cr)Tj 111.0002 0 TD 0 Tc (andom)Tj /T6 1 Tf 353.9998 0 TD ()Tj 76.0002 0 TD (k)Tj 42 0 TD (ey)Tj 122 0 TD (stream)Tj 312.9998 0 TD (seeded)Tj 278.0002 0 TD (with)Tj -1699 100.0001 TD [(random)-18999.8(data)-20000(the)-20999.8(k)]TJ 657 0 TD [(ernel)-19000.2(collects)-20000(from)-20000(device)-20000(timings )]TJ -657 198.9999 TD [(Op)-2000(enBSD)]TJ 419 0 TD 0.0001 Tc (lets)Tj 179 0 TD 0 Tc (administrators)Tj 581.9998 0 TD (select)Tj 253 0 TD (a)Tj 96.0002 0 TD (passw)Tj 212 0 TD (ord)Tj -1741 100 TD [(hashing)-24000.2(s)0.2(c)]TJ 370 0 TD [(heme)-25000(through)-24999.8(a)-24000.2(s)0(p)-1999.8(ecial)-24999.8(c)0(onguration)-24000(le)]TJ /T7 1 Tf -370 99 TD (p)Tj 38 0 TD (asswd c)Tj 265.9998 0 TD (onf\012)Tj /T6 1 Tf 224 0 TD ( )Tj /T7 1 Tf 62.0002 0 TD (p)Tj 37.9998 0 TD (asswd c)Tj 266.0002 0 TD (onf)Tj /T6 1 Tf 158 0 TD -0.0001 Tc (allo)Tj 127.9998 0 TD 0 Tc [(ws)-24000.2(detailed)-25000(con)]TJ 551.0002 0 TD 0.0001 Tc (trol)Tj -1731 100 TD 0 Tc (o)Tj 40 0 TD (v)Tj 42 0 TD [(er)-25999.8(whic)]TJ 259.9998 0 TD 27.0002 Tc (ht)Tj 103.0002 0 TD 0 Tc [(yp)-2000(e)-28000(o)0(f)-27000(p)0.2(assw)]TJ 463 0 TD [(ord)-25999.8(to)-27000(use)-27000(f)0(or)-27000.2(a)-27000(giv)]TJ 694 0 TD [(en)-27000(user)]TJ -1602 99 TD -0.0001 Tc [(or)-20000.3(group )]TJ 359.9998 0 TD 0 Tc [(It)-20999.8(also)-20000(p)-2000.2(ermits)-20000(d)0(ieren)]TJ 806 0 TD 0.0001 Tc [(t)-21000.1(p)0.3(assw)]TJ 265.0002 0 TD 0 Tc [(ord)-19000(sc)]TJ 208 0 TD (hemes)Tj -1639 100 TD 20.0002 Tc [(f)20000.2(o)20000.4(rl)20000.4(o)18000(c)20000.2(a)20000.4(l)-999.8(a)20000(n)20000.4(dY)20000.2(P)-999.6(p)20000(a)20000.4(s)20000(s)20000.2(w)]TJ 815.9998 0 TD 0.0001 Tc [(ords )-31999.9(F)]TJ 256.0002 0 TD 0 Tc (or)Tj /T7 1 Tf 94.9998 0 TD (b)Tj 34.0002 0 TD (crypt)Tj /T6 1 Tf 183 0 TD -0.0003 Tc [()-23000.1(o)-0.5(ne)-21000.8(can)-20000.3(a)-0.8(lso)]TJ -1384 100 TD 0 Tc [(sp)-2000(ecify)]TJ 281 0 TD -0.0001 Tc (the)Tj 148.9998 0 TD 0.0001 Tc (cost )Tj 221.0002 0 TD -0.0001 Tc (This)Tj 195 0 TD 0 Tc (lets)Tj 158.9998 0 TD 0.0001 Tc [(p)-1999.9(e)0.1(ople)]TJ 266 0 TD (adjust)Tj 258.0002 0 TD 0 Tc (passw)Tj 212 0 TD (ord)Tj -1741 99.0001 TD (v)Tj 41.9998 0 TD [(erication)-26999.8(time)-30000.2(for)-28000(increasing)-27000(pro)-2000.2(cessor)-27000.2(s)0(p)-2000(eed )]TJ 1725.9998 0 TD (A)Tj 60.0005 0 TD (t)Tj -1828 100 TD -0.0001 Tc (the)Tj 149 0 TD (time)Tj 195 0 TD -0.0002 Tc (of)Tj 101 0 TD 0 Tc (publication)Tj 463.9998 0 TD 0.0001 Tc (the)Tj 149.0002 0 TD 0 Tc (default)Tj 284.9998 0 TD -0.0001 Tc (cost)Tj 178.0002 0 TD 0 Tc (is)Tj 89 0 TD ()Tj 75 0 TD (for)Tj 132.9995 0 TD (a)Tj -1817.9995 100 TD (normal)Tj 295 0 TD -0.0001 Tc (user)Tj 188 0 TD 0 Tc (and)Tj 175 0 TD ()Tj 81.9998 0 TD 0.0001 Tc (for)Tj 140 0 TD (the)Tj 156.0002 0 TD 0 Tc [(sup)-2000.2(eruser )]TJ 443.9998 0 TD (Of)Tj 130.0002 0 TD (course)Tj ET endstream endobj 43 0 obj << /ProcSet [/PDF /Text ] /Font << /T5 8 0 R /T6 9 0 R /T7 10 0 R /T8 19 0 R /T11 25 0 R /T12 26 0 R /T17 39 0 R /T18 40 0 R /T19 44 0 R >> /ExtGState << /GS1 11 0 R >> >> endobj 46 0 obj << /Length 18722 >> stream BT /T6 1 Tf 0.12 0 0 -0.12 72 723.9 Tm 0 g /GS1 gs 0 Tc 0 Tw (whatev)Tj 259 0 TD [(er)-30000(cost)-30000(p)-2000(eople)-31000.1(c)]TJ 573 0 TD [(ho)-1999.8(ose)-30000.1(s)0(hould)-31000(b)-2000(e)-31000(r)0(eev)]TJ 761.0001 0 TD (aluated)Tj -1593.0001 100 TD [(from)-27000.1(t)0.1(ime)-28000(t)0.1(o)-28000(t)-0.1(ime )]TJ 0 199 TD (T)Tj 53 0 TD (o)Tj 78 0 TD (dieren)Tj 268 0 TD (tiate)Tj 201.0001 0 TD 1.9999 Tc [(be)1999.9(t)]TJ 114.9999 0 TD 0 Tc (w)Tj 58 0 TD 0.0001 Tc (een)Tj 156 0 TD 0 Tc (passw)Tj 212 0 TD (ords)Tj 188 0 TD (hashed)Tj 284.9999 0 TD (b)Tj 44 0 TD (y)Tj 80.0002 0 TD -0.0001 Tc (dif)Tj -1738.0001 100 TD 0 Tc (feren)Tj 176.0001 0 TD (t)Tj 78 0 TD (algorithms)Tj 457.9999 0 TD (ev)Tj 79 0 TD (ery)Tj 159.0001 0 TD (passw)Tj 212 0 TD (ord)Tj 164.9999 0 TD (function)Tj 343.9999 0 TD (other)Tj -1670.9999 99 TD 0.0001 Tc (than)Tj 204.0001 0 TD 0 Tc (the)Tj 153 0 TD (original)Tj /T7 1 Tf 310.9999 0 TD (crypt)Tj /T6 1 Tf 228.9999 0 TD (prexes)Tj 313.0001 0 TD (its)Tj 127.0001 0 TD (output)Tj 282 0 TD -0.0001 Tc (with)Tj 199 0 TD 0 Tc (a)Tj -1818.0001 100 TD (v)Tj 42.0001 0 TD (ersion)Tj 247.9999 0 TD (iden)Tj 150 0 TD (tier )Tj 254.0001 0 TD -0.0001 Tc (Th)Tj 103.9999 0 TD 0 Tc (us)Tj 114.0001 0 TD (a)Tj 76.9999 0 TD (single)Tj 238.9999 0 TD (passw)Tj 212.0002 0 TD (ord)Tj 154 0 TD (le)Tj 141 0 TD -0.0001 Tc (can)Tj -1735.0001 99 TD 0.0001 Tc (con)Tj 123.0001 0 TD 0 Tc (tain)Tj 191.9999 0 TD 0.0001 Tc (sev)Tj 112 0 TD 0 Tc (eral)Tj 183 0 TD (t)Tj 30 0 TD [(yp)-2000(es)]TJ 212 0 TD (of)Tj 116.0001 0 TD (passw)Tj 212 0 TD -0.0001 Tc (ord )Tj 245.9999 0 TD 0 Tc (In)Tj 125.9999 0 TD 0.0001 Tc (the)Tj 165.0002 0 TD -0.0001 Tc (cur)Tj -1717.0001 100 TD 0.0001 Tc (ren)Tj 114.0001 0 TD 0 Tc (t)Tj 74 0 TD [(Op)-2000.1(enBSD)]TJ 406.9999 0 TD (implemen)Tj 348.0001 0 TD (tation)Tj /T7 1 Tf 285.9999 0 TD (b)Tj 34 0 TD (crypt)Tj /T6 1 Tf 232.9999 0 TD 0.0001 Tc (passw)Tj 212 0 TD (ords)Tj -1707.9999 100 TD 0 Tc [(start)-23000.1(with)-24999.9()-0.1(a)-22000.1(while)-24000(M)0(D)]TJ /T7 1 Tf 1096 0 TD (crypt)Tj /T6 1 Tf 215.0001 0 TD (passw)Tj 211.9998 0 TD [(ords)-22000(with)]TJ -1522.9999 99 TD ( )Tj 267.0001 0 TD [(Because)-23000(the)-26000.1(result)-24000.1(of)-25000(traditional)]TJ /T7 1 Tf 1183 0 TD (crypt)Tj /T6 1 Tf 215.9998 0 TD 0.0001 Tc (nev)Tj 125.0002 0 TD -0.0002 Tc (er)Tj -1791.0001 100 TD 0 Tc [(b)-2000.1(e)0(gins)-27000(w)-0.1(ith)-29000(a)-27000()-26000(there)-27000(is)-27999.9(nev)]TJ 1111.0001 0 TD -0.0001 Tc [(er)-27000.1(an)]TJ 182.9999 0 TD 26 Tc [(ya)26000(m)]TJ 178.9999 0 TD 0 Tc (biguit)Tj 210 0 TD (y)Tj 37 0 TD ( )Tj /T5 1 Tf -1719.9999 306 TD ()Tj 168 0 TD (Bcrypt)Tj 378 0 TD (Ev)Tj 127 0 TD (aluation)Tj /T6 1 Tf -673 239 TD (Because)Tj /T7 1 Tf 347.0001 0 TD (b)Tj 33.9999 0 TD (crypt)Tj /T6 1 Tf 248.0001 0 TD (has)Tj 177.0001 0 TD (adjustable)Tj 427.9999 0 TD (cost)Tj 229.9999 0 TD (w)Tj 58.0002 0 TD (e)Tj 93.9998 0 TD (cannot)Tj -1615.9999 100 TD [(meaningfully)-28999.9(e)0(v)]TJ 571 0 TD [(aluate)-29000(t)0.1(he)-29999.9(p)-2000(erformance)-28000(of)-28999.8(the)-30000(a)0.2(lgo)]TJ -571 99 TD (rithm)Tj 238.0001 0 TD -0.0001 Tc (on)Tj 122.9999 0 TD 0.0001 Tc (its)Tj 123 0 TD 0 Tc (o)Tj 40 0 TD (wn )Tj 187 0 TD (Instead)Tj 326.0001 0 TD (w)Tj 57.9999 0 TD (e)Tj 71 0 TD (will)Tj 165 0 TD (place)Tj 219.0001 0 TD (it)Tj 89.9998 0 TD 0.0002 Tc (in)Tj 105 0 TD 0.0001 Tc (the)Tj -1744.9999 99.9998 TD (con)Tj 123.0001 0 TD 0 Tc [(text)-25000(of)-25999.9(t)]TJ 293 0 TD (w)Tj 57.9999 0 TD [(o)-25000.1(p)-1999.9(opular)-26000.1(passw)]TJ 585 0 TD [(ord)-24000(hashing)-25000(f)0(unctions )]TJ -1059 100 TD (W)Tj 78 0 TD [(e)-22000(d)0(escrib)-2000.1(e)-19999.9(v)]TJ 412 0 TD [(arious)-20000(attac)]TJ 422.0001 0 TD [(ks)-19999.9(and)-21000(optimizations)-21000.2(t)0(hese)]TJ -912.0001 99.0002 TD [(functions)-30999.9(ha)]TJ 447.0001 0 TD (v)Tj 41.9999 0 TD [(e)-29000(u)0(ndergone)-29999.9(and)-30000(discuss)-30000(the)-31000(applica)]TJ -489 100 TD (bilit)Tj 145.0001 0 TD [(y)-28000(o)0.1(f)-27000(the)-28000(same)-27000(tec)]TJ 620.9999 0 TD [(hniques)-28000(to)]TJ /T7 1 Tf 404 0 TD (b)Tj 34 0 TD (crypt)Tj /T6 1 Tf 183.0001 0 TD ( )Tj /T19 1 Tf -1387.0001 211 TD ()Tj 238.0001 0 TD (Comparison)Tj /T6 1 Tf -238.0001 211 TD (In)Tj 117.0001 0 TD (the)Tj 156 0 TD (follo)Tj 152.9999 0 TD (wing)Tj 237 0 TD (w)Tj 58 0 TD (e)Tj 77 0 TD (giv)Tj 107.0001 0 TD (e)Tj 76.9999 0 TD (a)Tj 82 0 TD (brief)Tj 205 0 TD (o)Tj 39.9999 0 TD (v)Tj 42.0001 0 TD (erview)Tj 272.0001 0 TD -0.0002 Tc (of)Tj 108 0 TD 0 Tc (t)Tj 30 0 TD (w)Tj 58 0 TD (o)Tj -1819.0001 98.9998 TD (passw)Tj 212 0 TD [(ord)-17000.1(h)0.1(ashing)-18000(functions)-18999.9(i)-0.1(n)-18999.9(w)-0.1(idespread)-18000(u)0(se)-19000(to)-2000(da)]TJ 1588.9999 0 TD (y)Tj 37.0002 0 TD ()Tj -1838.0001 100.0002 TD [(and)-26999.9(s)-0.1(tate)-28000.1(their)-26999.9(main)-27999.9(dierences)-27000(from)]TJ /T7 1 Tf 1371 0 TD (b)Tj 34.0001 0 TD (crypt)Tj /T6 1 Tf 183 0 TD ( )Tj /T17 1 Tf -1588.0001 310.9998 TD ( )Tj 292.0001 0 TD (T)Tj 58 0 TD [(raditional)-32000(crypt)]TJ /T6 1 Tf -350.0001 253.0002 TD (T)Tj 53 0 TD (raditional)Tj /T7 1 Tf 373 0 TD (crypt)Tj /T6 1 Tf 293.0001 0 TD [(s)-23000(design)-21000(rationale)-21000.1(dates)-21000(bac)]TJ 1001.9998 0 TD 21.0002 Tc [(kt)21000.2(o)]TJ -1720.9999 100 TD 0.0001 Tc [(\012\015)-18999.8( \012)]TJ 251.0001 0 TD -0.0001 Tc ( )Tj 81 0 TD 0 Tc [(It)-21000(uses)-21000(a)-20000.1(p)0.1(assw)]TJ 527.0001 0 TD [(ord)-19000.1(o)0.1(f)-20000(u)0(p)-21000.1(t)0(o)-20999.9(eigh)]TJ 581 0 TD 19.9998 Tc (tc)Tj 86.9998 0 TD 0 Tc (haracters)Tj -1526.9999 99 TD 0.0001 Tc [(as)-20999.8(a)-20999.9(k)]TJ 201.0001 0 TD 0 Tc [(ey)-22000(for)-21000.1(D)0.1(ES)-22000( )]TJ 518.0001 0 TD -0.0001 Tc ( )Tj 81 0 TD 0 Tc [(The)-21999.9()0(bit)-21000.1(DES)-22000.1(k)]TJ 628.9999 0 TD [(ey)-21000(is)-20999.8(formed)]TJ -1429 100 TD (b)Tj 43.9999 0 TD 26.0001 Tc [(yc)26000.1(o)26000.2(m)]TJ 216.0001 0 TD 0 Tc [(bining)-24999.9(the)-27000.1(lo)]TJ 455.9999 0 TD [(worder)-23999.9(\015)-25000(b)0(its)-26999.9(o)0(f)-26000(eac)]TJ 738.0001 0 TD 25 Tc (hc)Tj 106 0 TD 0 Tc (haracter)Tj -1560.0001 100 TD [(in)-32000(the)-32000(p)0(assw)]TJ 460 0 TD (ord )Tj 191 0 TD [(If)-31999.9(the)-32000(passw)]TJ 446 0 TD [(ord)-29000(is)-32000(shorter)-30000(than)-31000.2()]TJ -1097 98.9998 TD (c)Tj 35.0001 0 TD [(haracters)-24999.9(it)-27999.9(is)-28000(padded)-27000.1(with)-29000(zero)-26000(bits)-28000(on)-26999.8(the)-28000.2(r)0(igh)]TJ 1766.9998 0 TD (t )Tj -1801.9999 199.0001 TD [(A)-26000.1(bit)-25999.9(salt)-24999.9(is)-26000(used)-26000(to)-25999.9(p)-2000.1(e)0(rturb)-25999.8(the)-25999.9(DES)-26000(algorithm)]TJ 0 100 TD (so)Tj 113.0001 0 TD (that)Tj 191 0 TD (the)Tj 153.9999 0 TD (same)Tj 219 0 TD (passw)Tj 212 0 TD (ord)Tj 158 0 TD (plain)Tj 178 0 TD (text)Tj 183 0 TD (can)Tj 162.9999 0 TD 0.0001 Tc [(pro)-1999.9(d)0.3(uce)]TJ -1570.9999 100 TD 0 Tc (\012)Tj 227 0 TD [(p)-1999.9(o)-0.1(ssible)]TJ 322 0 TD (passw)Tj 212 0 TD (ord)Tj 157.0001 0 TD (encryptions )Tj 507.9999 0 TD (A)Tj 100.0001 0 TD -0.0001 Tc [(mo)-2000.1(dica)]TJ -1526.0001 99 TD 0 Tc [(tion)-19000.1(to)-19999.9(the)-19000(DES)-20000(algorithm)-20000(sw)]TJ 1062.0001 0 TD [(apping)-18000(bits)]TJ /T8 1 Tf 417 0 TD (i)Tj /T6 1 Tf 47.9998 0 TD (and)Tj /T8 1 Tf 153.0002 0 TD (i)Tj /T6 1 Tf 31 0 TD 1.9998 Tc [()1999.8()]TJ -1711.0001 100 TD 0.0001 Tc (in)Tj 104.0001 0 TD 0 Tc (the)Tj 148.9999 0 TD 0.0001 Tc (DES)Tj 201.0001 0 TD 0 Tc (EBo)Tj 184 0 TD [(x)-32000(o)-0.1(utput)]TJ 355.0001 0 TD (when)Tj 222.9999 0 TD (bit)Tj /T8 1 Tf 136 0 TD (i)Tj /T6 1 Tf 63 0 TD (is)Tj 90.0001 0 TD (set)Tj 135.9998 0 TD (in)Tj 104 0 TD 0.0001 Tc (the)Tj -1744.9999 100 TD 0 Tc [(salt)-20000.1(a)0.1(c)]TJ 249.9999 0 TD (hiev)Tj 148.0001 0 TD [(es)-18000(this)-19000(while)-19000.1(also)-18000.1(making)-19000(DES)-19000(encryption)]TJ -398.0001 99 TD (hardw)Tj 224.9999 0 TD [(are)-26000.1(u)0.1(seless)-26000(f)0(or)-27000(passw)]TJ 745.0001 0 TD [(ord)-26000(g)0(uessing )]TJ -970 199 TD [(The)-28000()-0.1(bit)-26000.1(c)0(onstan)]TJ 686 0 TD [(t)-27000()-25999.9(is)-28000.1(encrypted)-26999.9()-26999.8(times)-28000(w)0.2(ith)]TJ -686 100 TD (the)Tj 154.0001 0 TD -0.0001 Tc (DES)Tj 204.9999 0 TD 0 Tc (k)Tj 42.0001 0 TD (ey)Tj 74.0001 0 TD ( )Tj 94 0 TD (The)Tj 181.9999 0 TD (nal)Tj 195.9999 0 TD (output)Tj 283.0002 0 TD -0.0002 Tc (is)Tj 94.9999 0 TD 0 Tc (the)Tj 154.0001 0 TD (bit)Tj 251 0 TD -0.0001 Tc (salt)Tj -1730.0001 100 TD 0 Tc [(concatenated)-28000(with)-29000(t)0.1(he)-29999.9(encrypted)-28000(bit)-28000.1(v)]TJ 1505.0001 0 TD (alue )Tj 212 0 TD (The)Tj -1717.0001 99 TD (resulting)Tj 352 0 TD (\015bit)Tj 250 0 TD (v)Tj 39 0 TD (alue)Tj 185 0 TD (is)Tj 93 0 TD [(reco)-2000(ded)]TJ 317.0001 0 TD -0.0001 Tc (in)Tj 66.9999 0 TD 0 Tc (to)Tj 111 0 TD ()Tj 121.0001 0 TD 0.0001 Tc (prin)Tj 146 0 TD 0 Tc (table)Tj -1681.0001 100 TD [(ASCI)-1999.9(I)-28000.1(c)]TJ 293 0 TD (haracters )Tj 1717.0001 -5317 TD (A)Tj 59.9998 0 TD [(t)-29000.2(t)0.2(he)-29000(time)-28999.8(traditional)]TJ /T7 1 Tf 806 0 TD (crypt)Tj /T6 1 Tf 220.0002 0 TD (w)Tj 58 0 TD [(as)-26999.8(conceiv)]TJ 366 0 TD -0.0003 Tc [(ed)-28000.8(i)0.2(t)-29000.8(w)]TJ 276 0 TD 0 Tc (as)Tj -1786 100 TD 0.0001 Tc (fast)Tj 174 0 TD 0 Tc (enough)Tj 300 0 TD -0.0001 Tc (for)Tj 141.9998 0 TD 0 Tc (authen)Tj 247.0002 0 TD (tication)Tj 319 0 TD (but)Tj 166 0 TD -0.0002 Tc [(to)-2000.4(o)]TJ 160 0 TD 0 Tc (costly)Tj 253 0 TD (for)Tj -1761 99 TD -0.0001 Tc (passw)Tj 212 0 TD 0 Tc (ord)Tj 154.9998 0 TD (guessing)Tj 338 0 TD 0.0002 Tc (to)Tj 110 0 TD 2.0002 Tc (be)Tj 122.0002 0 TD 0 Tc (practical )Tj 400 0 TD (T)Tj 52.9998 0 TD 2.0002 Tc [(od)2000.4(a)]TJ 130.0002 0 TD 0 Tc (y)Tj 37 0 TD ()Tj 60.9995 0 TD (w)Tj 58.0005 0 TD (e)Tj 73 0 TD (are)Tj -1749 100 TD (a)Tj 40 0 TD (w)Tj 57.9998 0 TD [(are)-26000(t)0(hat)-27999.8(i)-0.2(t)-28000(e)0(xhibits)-28000(three)-27000.2(s)0.2(erious)-27000(limitations)]TJ 1646.9998 0 TD 0.0003 Tc (the)Tj -1744.9995 100 TD 0 Tc [(restricted)-25000(passw)]TJ 579.9998 0 TD [(ord)-25000.2(space)-25000.2(the)-27000(small)-26000(salt)-25000(space)-26000(and)]TJ -579.9998 99 TD [(the)-30000.2(constan)]TJ 421 0 TD [(t)-28000(e)0.2(xecution)-29000(c)0(ost )]TJ 641 0 TD -0.0001 Tc [(In)-29000.1(con)]TJ 227.9998 0 TD 0.0001 Tc (trast)Tj /T7 1 Tf 223.0002 0 TD 0 Tc (b)Tj 34 0 TD (crypt)Tj /T6 1 Tf 220.9995 0 TD 0.0003 Tc (al)Tj -1767.9995 100 TD -0.0002 Tc (lo)Tj 63 0 TD (ws)Tj 132 0 TD 0 Tc (for)Tj 138.9998 0 TD (longer)Tj 261.0002 0 TD (passw)Tj 212 0 TD (ords)Tj 217 0 TD (has)Tj 161 0 TD -0.0001 Tc (salts)Tj 202 0 TD 0 Tc (large)Tj 215 0 TD (enough)Tj -1602 99 TD [(to)-28999.8(b)-2000.2(e)-28999.8(unique)-29000.2(o)]TJ 527.9998 0 TD (v)Tj 42.0002 0 TD 0.0001 Tc [(er)-26999.7(all)-28999.7(t)0.1(ime)-28999.7(and)-28999.9(has)-27999.9(adaptable)-27999.4(cost )]TJ -570 100 TD 0 Tc [(These)-27000(l)0(imitiations)-28000(therefore)-26000(do)-26999.8(not)-28000(a)-0.2(pply)-26999.5(to)]TJ /T7 1 Tf 1619 0 TD (b)Tj 34 0 TD (crypt)Tj /T6 1 Tf 183 0 TD ( )Tj /T17 1 Tf -1836 315 TD ( )Tj 291.9998 0 TD 0.0001 Tc [(MD)-30999.7(c)-0.1(rypt)]TJ /T6 1 Tf -291.9998 253 TD 0 Tc (MD)Tj /T7 1 Tf 208 0 TD (crypt)Tj /T6 1 Tf 219 0 TD (w)Tj 57.9998 0 TD [(as)-26000(written)-27000.2(b)]TJ 435.0002 0 TD 25.9998 Tc (yP)Tj 125 0 TD 0 Tc [(oulHenning)-26000(Kamp)-27000(for)]TJ -1045 100 TD (F)Tj 46.9998 0 TD (reeBSD )Tj 351 0 TD (The)Tj 176.0002 0 TD 0.0001 Tc (main)Tj 213 0 TD 0 Tc [(reason)-32000(for)-31999.8(using)]TJ 620 0 TD -0.0001 Tc (MD)Tj 214 0 TD 0 Tc (w)Tj 58 0 TD -0.0005 Tc (as)Tj 107 0 TD (to)Tj -1786 100 TD 0 Tc (a)Tj 40 0 TD (v)Tj 42 0 TD [(oid)-31000.2(p)0(roblems)-30999.8(with)-32000(American)]TJ 1076 0 TD [(exp)-2000(ort)-32000(p)0(rohibitions)]TJ -1158 99 TD [(on)-21000.2(cryptographic)-20000(pro)-1999.8(d)-0.2(ucts)-23000(and)-21000(to)-21999.8(allo)]TJ 1374 0 TD [(w)-19999.8(for)-21000(a)-21000(longer)]TJ -1374 100 TD -0.0001 Tc (passw)Tj 212 0 TD 0.0001 Tc [(ord)-22999.9(l)0.3(ength)-23999.9(t)0.1(han)-24999.7(t)0.1(he)-24999.9()-23999.7(c)]TJ 826 0 TD 0 Tc [(haracters)-22000.2(u)0.2(sed)-25000(b)]TJ 588 0 TD 23.9995 Tc [(yD)23999(E)23999.5(S)]TJ /T7 1 Tf -1626 99 TD -0.0001 Tc (crypt)Tj /T6 1 Tf 183 0 TD 0 Tc ( )Tj 96.9998 0 TD (The)Tj 183.0002 0 TD -0.0001 Tc (passw)Tj 212 0 TD 0 Tc (ord)Tj 158.9998 0 TD (length)Tj 266.0002 0 TD (is)Tj 95.9998 0 TD (restricted)Tj 382.0002 0 TD (only)Tj 194 0 TD (b)Tj 44 0 TD (y)Tj -1816 100 TD -0.0001 Tc [(MDs)-28000.3(m)0.1(axim)]TJ 509.9998 0 TD 0.0001 Tc [(um)-27999.7(message)-25999.9(size)-27999.9(of)-26999.9()]TJ /T11 1 Tf 756 -30 TD 0.0002 Tc ()Tj /T6 1 Tf 98.0002 30 TD 0 Tc (bits )Tj 195 0 TD 0.0001 Tc [(The)-27999.4(salt)]TJ -1559 100 TD -0.0001 Tc [(can)-27000.3(v)]TJ 190.9998 0 TD 0 Tc [(ary)-27000.2(from)-27000()-27000(to)-27000()-27000(bits )]TJ -190.9998 199 TD (MD)Tj /T7 1 Tf 208 0 TD (crypt)Tj /T6 1 Tf 219 0 TD [(hashes)-25999.8(the)-27000.2(passw)]TJ 617 0 TD [(ord)-25999.8(and)-26000.2(salt)-27000(in)-27999.5(a)-26000.5(n)]TJ 672.9995 0 TD 0.0003 Tc (um)Tj -1716.9995 100 TD 0 Tc [(b)-1999.8(e)0(r)-24000(o)-0.2(f)-24000(d)0.2(ieren)]TJ 501 0 TD [(t)-24000(com)]TJ 201.9998 0 TD [(binations)-23000(to)-24000.2(slo)]TJ 550 0 TD 24.0002 Tc [(wd)24000.2(o)]TJ 170.0002 0 TD -0.0002 Tc [(wn)-23000.2(the)-25000.2(e)-0.7(v)]TJ 344.9995 0 TD 0.0003 Tc (al)Tj -1767.9995 99 TD 0 Tc [(uation)-29000(sp)-2000(eed )]TJ 527 0 TD 0.0001 Tc [(Some)-30000.1(steps)-28999.9(i)0.3(n)-30000.1(t)0.3(he)-29999.7(algorithm)-28999.9(m)0.6(ak)]TJ 1212 0 TD 28.9995 Tc [(ei)28999(t)]TJ -1739 100 TD 0 Tc [(doubtful)-25000(that)-24000(the)-24000.2(s)0.2(c)]TJ 714 0 TD -0.0001 Tc [(heme)-23000.3(w)]TJ 269.9998 0 TD 0 Tc [(as)-23000(designed)-23000(from)-24000(a)-23000(c)0(ryp)]TJ -983.9998 98.9998 TD (tographic)Tj 383 0 TD 2 Tc [(po)2000.2(i)1999.8(n)]TJ 157 0 TD 0 Tc (t)Tj 73 0 TD -0.0002 Tc (of)Tj 107 0 TD 0 Tc (viewfor)Tj 388 0 TD (instance)Tj 362.9998 0 TD (the)Tj 156.0002 0 TD -0.0002 Tc (binary)Tj -1627 100 TD 0 Tc (represen)Tj 300 0 TD [(tation)-21000(of)-23000(the)-23999.8(p)-0.2(assw)]TJ 678.9998 0 TD [(ord)-21000(length)-23000(at)-22999.8(some)-22999.5(p)-2000(o)-0.5(in)]TJ 849.0002 0 TD (t)Tj -1828 100.0002 TD [(determines)-28000.2(whic)]TJ 584.9998 0 TD [(h)-28000(data)-28000.2(is)-28000.2(hashed)-29000(for)-27000.2(e)0(v)]TJ 856 0 TD [(ery)-27000(zero)-28000(bit)]TJ -1440.9998 98.9998 TD [(the)-31000.2()0.2(rst)-30000(b)]TJ 364 0 TD [(yte)-30000(of)-29999.8(the)-30000(passw)]TJ 597 0 TD 29 Tc [(o)29000.2(r)28999.8(da)29000.2(n)28999.8(d)-1000(f)29000(o)29000.2(re)29000(v)]TJ 521.9998 0 TD 0.0001 Tc [(ery)-28999.9(set)-31000.4(b)0.6(it)]TJ -1482.9998 100 TD -0.0001 Tc [(the)-28000.1()-0.3(rst)-27000.3(b)]TJ 358 0 TD 0 Tc [(yte)-28000.2(o)0.2(f)-27000(a)-28000.2(previous)-26000.2(h)0(ash)-27000(c)0(omputation )]TJ -358 199 TD [(The)-22999.8(o)-0.2(utput)-23000.2(i)0(s)-23000(the)-23000(concatenation)-21000(o)0.2(f)-23000(t)-0.2(he)-23000(v)]TJ 1445 0 TD [(ersion)-20999.5(iden)]TJ -1445 100 TD [(tier)-29000()0.2()-27000(t)0(he)-28999.8(salt)-29000.2(a)-29000()-28000.2(s)0(eparator)-27000(a)0.2(nd)-28000(the)-30000()]TJ 0 99 TD [(bit)-27999.8(hash)-26999.8(output )]TJ 0 200 TD (MD)Tj /T7 1 Tf 227 0 TD (crypt)Tj /T6 1 Tf 238 0 TD (places)Tj 263.9998 0 TD (virtually)Tj 355 0 TD (no)Tj 134 0 TD (limit)Tj 217.0002 0 TD -0.0002 Tc (on)Tj 134 0 TD 0 Tc (the)Tj 160.9995 0 TD 0.0001 Tc (size)Tj -1729.9995 99.0002 TD -0.0002 Tc (of)Tj 122.9998 0 TD 0.0001 Tc (passw)Tj 212 0 TD (ords)Tj 239.0002 0 TD 0 Tc (while)Tj /T7 1 Tf 246 0 TD (b)Tj 33.9998 0 TD (crypt)Tj /T6 1 Tf 248.0002 0 TD -0.0001 Tc (has)Tj 176.9998 0 TD 0 Tc (a)Tj 98 0 TD -0.0001 Tc (maxim)Tj 245.0002 0 TD -0.0005 Tc (um)Tj 170.9995 0 TD 0.0005 Tc (of)Tj -1792.9995 100 TD -0.0002 Tc ()Tj 121.9998 0 TD 0 Tc (b)Tj 44 0 TD 0.0001 Tc (ytes )Tj 239 0 TD 0 Tc (W)Tj 78.0002 0 TD (e)Tj 75.9998 0 TD (do)Tj 127.0002 0 TD (not)Tj 158 0 TD (consider)Tj 334.9998 0 TD -0.0001 Tc (this)Tj 173 0 TD 0 Tc (a)Tj 81 0 TD (serious)Tj 283.9998 0 TD 0.0001 Tc (lim)Tj -1716.9995 100 TD 0 Tc (itation)Tj 274 0 TD -0.0002 Tc (of)Tj /T7 1 Tf 101 0 TD 0 Tc (b)Tj 33.9998 0 TD 0.0001 Tc (crypt)Tj /T6 1 Tf 183 0 TD 0 Tc ()Tj 59.0002 0 TD -0.0002 Tc (ho)Tj 86 0 TD 0 Tc (w)Tj 58 0 TD (ev)Tj 79 0 TD (er )Tj 146.9998 0 TD 0.0001 Tc (Not)Tj 170 0 TD 0 Tc (only)Tj 189 0 TD (are)Tj 145.0002 0 TD (users)Tj 215 0 TD (un)Tj -1740 98.9999 TD (lik)Tj 88 0 TD -0.0001 Tc [(ely)-20000.3(t)-0.1(o)-21000.1(c)]TJ 253.9998 0 TD 0 Tc [(ho)-2000(ose)-20000(suc)]TJ 336 0 TD [(h)-20000.2(l)0.2(ong)-21000.2(passw)]TJ 452 0 TD [(ords)-20000(b)-0.2(ut)-21000(if)-22000(they)-21000(did)]TJ -1129.9998 100 TD (MD)Tj /T7 1 Tf 209.9998 0 TD 0.0001 Tc (crypt)Tj /T6 1 Tf 191.0002 0 TD 0 Tc [(s)-30000(bit)-28000.2(output)-28999.8(s)-0.2(ize)-28999.8(w)]TJ 859 0 TD [(ould)-29000(b)-2000(e)0(come)-28999.5(the)]TJ -1260 99.0001 TD (limiting)Tj 316.9998 0 TD (factor)Tj 247.0002 0 TD (in)Tj 105 0 TD (securit)Tj 239 0 TD (y)Tj 37 0 TD ( )Tj 83.9998 0 TD (A)Tj 99 0 TD 0.0001 Tc (brute)Tj 230.0002 0 TD 0 Tc (force)Tj 209 0 TD (attac)Tj 183 0 TD (k)Tj 41.9995 0 TD 0.0005 Tc (er)Tj -1791.9995 100 TD 0 Tc [(could)-31000.2(m)0(ore)-31000(e)0(asily)-31000()0.2(nd)-31999.8(short)-31000(strings)-31000(h)-0.2(ashing)-31000(to)-32000(the)]TJ T* [(same)-28999.8(v)]TJ 249 0 TD [(alue)-29000.2(as)-29000(a)-29000.2(u)0.2(sers)-27999.8(passw)]TJ 796.9998 0 TD [(ord)-27000.2(than)-29999.8(guess)-28000(the)-30000(ac)]TJ -1045.9998 98.9999 TD [(tual)-31000(passw)]TJ 385.9998 0 TD 0.0001 Tc (ord )Tj 187.0002 0 TD 0 Tc (Finally)Tj 248 0 TD 31 Tc [(l)31000(i)31000.2(k)]TJ 142 0 TD 29.9998 Tc [(eD)29999.8(E)29999.6(S)]TJ /T7 1 Tf 263.9998 0 TD 0.0001 Tc (crypt)Tj /T6 1 Tf 183.0002 0 TD 0 Tc [()-31999.8(MD)]TJ /T7 1 Tf 266 0 TD (crypt)Tj /T6 1 Tf -1676 100 TD [(has)-26999.8(xed)-28000(cost )]TJ /T19 1 Tf 0 216 TD ()Tj 238 0 TD (A)Tj 76 0 TD -0.0001 Tc (ttac)Tj 176 0 TD 0 Tc (ks)Tj 131 0 TD -0.0001 Tc (and)Tj 202 0 TD 0 Tc (V)Tj 70 0 TD (ulnerabilities)Tj /T6 1 Tf -893 216.0001 TD -0.0001 Tc (Once)Tj 222.9998 0 TD 0.0002 Tc (an)Tj 127.0002 0 TD -0.0001 Tc (attac)Tj 183 0 TD 0 Tc (k)Tj 42 0 TD (er)Tj 107 0 TD (has)Tj 158.9998 0 TD (obtained)Tj 352 0 TD (a)Tj 80.0002 0 TD -0.0001 Tc (list)Tj 150 0 TD -0.0002 Tc (of)Tj 106 0 TD 0 Tc (passw)Tj 212 0 TD (ord)Tj -1741 99.0001 TD [(hashes)-24000(p)0.2(assw)]TJ 496 0 TD [(ords)-23000.2(c)0.2(an)-23999.8(b)-2000.2(e)-25000(guessed)-22999.8(b)]TJ 777 0 TD -0.0001 Tc [(y)-24999.9(comparing)-23000.1(t)-0.6(he)]TJ -1273 99.9999 TD 0 Tc [(target)-21000.2(list)-22000(to)-22000(a)-22000.2(l)0.2(ist)-21999.8(o)-0.2(f)-21999.8(h)-0.2(ashes)-21000(o)0.2(f)-22000.2(c)0(andidate)-21000.2(passw)]TJ 1685 0 TD (ords )Tj ET endstream endobj 47 0 obj << /ProcSet [/PDF /Text ] /Font << /T5 8 0 R /T6 9 0 R /T7 10 0 R /T8 19 0 R /T11 25 0 R /T17 39 0 R /T19 44 0 R >> /ExtGState << /GS1 11 0 R >> >> endobj 49 0 obj << /Length 25037 >> stream 0 g /GS1 gs q 429.48 0 0 -0.48 89.508 733.968 cm /Im1 Do Q q 0.48 0 0 -12 89.268 733.488 cm /Im1 Do Q q 0.48 0 0 -12 106.788 733.488 cm /Im1 Do Q q 0.48 0 0 -12 108.828 733.488 cm /Im1 Do Q BT /T6 1 Tf 0.12 0 0 -0.12 136.68 725.1 Tm 0 Tc 0 Tw ()Tj ET q 0.48 0 0 -12 174.228 733.488 cm /Im1 Do Q BT 0.12 0 0 -0.12 202.2 725.1 Tm ()Tj ET q 0.48 0 0 -12 239.748 733.488 cm /Im1 Do Q BT 0.12 0 0 -0.12 270.12 725.1 Tm 0.0002 Tc ()Tj ET q 0.48 0 0 -12 310.188 733.488 cm /Im1 Do Q BT 0.12 0 0 -0.12 338.16 725.1 Tm 0 Tc ()Tj ET q 0.48 0 0 -12 375.588 733.488 cm /Im1 Do Q BT 0.12 0 0 -0.12 406.08 725.1 Tm -0.0002 Tc ()Tj ET q 0.48 0 0 -12 446.028 733.488 cm /Im1 Do Q BT 0.12 0 0 -0.12 477.6 725.1 Tm 0 Tc (\012)Tj ET q 0.48 0 0 -12 518.748 733.488 cm /Im1 Do Q q 0.48 0 0 -12 89.268 721.488 cm /Im1 Do Q BT 0.12 0 0 -0.12 95.4 713.1 Tm (n)Tj ET q 0.48 0 0 -12 106.788 721.488 cm /Im1 Do Q q 0.48 0 0 -12 108.828 721.488 cm /Im1 Do Q BT 0.12 0 0 -0.12 129.84 713.1 Tm (digits)Tj ET q 0.48 0 0 -12 174.228 721.488 cm /Im1 Do Q BT 0.12 0 0 -0.12 186.96 713.1 Tm 0.0001 Tc (lo)Tj 63 0 TD 0 Tc (w)Tj 58 0 TD 0.0001 Tc (ercase)Tj ET q 0.48 0 0 -12 239.748 721.488 cm /Im1 Do Q BT 0.12 0 0 -0.12 254.88 713.1 Tm 0 Tc (lo)Tj 63 0 TD (w)Tj 57.9998 0 TD (ercase)Tj ET q 0.48 0 0 -12 310.188 721.488 cm /Im1 Do Q BT 0.12 0 0 -0.12 319.44 713.1 Tm [(mixed)-26999.8(case)]TJ ET q 0.48 0 0 -12 375.588 721.488 cm /Im1 Do Q BT 0.12 0 0 -0.12 387.36 713.1 Tm [(mixed)-28000(case)]TJ ET q 0.48 0 0 -12 446.028 721.488 cm /Im1 Do Q BT 0.12 0 0 -0.12 462.6 713.1 Tm (k)Tj 42 0 TD [(eyb)-2000(oard)]TJ ET q 0.48 0 0 -12 518.748 721.488 cm /Im1 Do Q q 0.48 0 0 -12 89.268 709.608 cm /Im1 Do Q q 0.48 0 0 -12 106.788 709.608 cm /Im1 Do Q q 0.48 0 0 -12 108.828 709.608 cm /Im1 Do Q q 0.48 0 0 -12 174.228 709.608 cm /Im1 Do Q q 0.48 0 0 -12 239.748 709.608 cm /Im1 Do Q BT 0.12 0 0 -0.12 246 701.22 Tm (alphan)Tj 243 0 TD (umeric)Tj ET q 0.48 0 0 -12 310.188 709.608 cm /Im1 Do Q q 0.48 0 0 -12 375.588 709.608 cm /Im1 Do Q BT 0.12 0 0 -0.12 381.84 701.22 Tm 0.0001 Tc (alphan)Tj 243 0 TD 0 Tc (umeric)Tj ET q 0.48 0 0 -12 446.028 709.608 cm /Im1 Do Q BT 0.12 0 0 -0.12 460.56 701.22 Tm (c)Tj 35.0002 0 TD (haracters)Tj ET q 0.48 0 0 -12 518.748 709.608 cm /Im1 Do Q q 429.48 0 0 -0.48 89.508 697.608 cm /Im1 Do Q q 429.48 0 0 -0.48 89.508 695.688 cm /Im1 Do Q q 0.48 0 0 -12 89.268 695.208 cm /Im1 Do Q BT 0.12 0 0 -0.12 96 686.8201 Tm ()Tj ET q 0.48 0 0 -12 106.788 695.208 cm /Im1 Do Q q 0.48 0 0 -12 108.828 695.208 cm /Im1 Do Q BT 0.12 0 0 -0.12 114.96 686.8201 Tm ()Tj /T8 1 Tf 42.0001 0 TD ()Tj /T6 1 Tf 23 0 TD -0.0001 Tc ()Tj 181.9999 0 TD 0.0001 Tc (sec)Tj ET q 0.48 0 0 -12 174.228 695.208 cm /Im1 Do Q BT 0.12 0 0 -0.12 185.4 686.8201 Tm 0 Tc ()Tj /T8 1 Tf 42.0001 0 TD ()Tj /T6 1 Tf 22.9999 0 TD (\012)Tj 141 0 TD (sec)Tj ET q 0.48 0 0 -12 239.748 695.208 cm /Im1 Do Q BT 0.12 0 0 -0.12 258.72 686.8201 Tm (\015)Tj 141 0 TD (sec)Tj ET q 0.48 0 0 -12 310.188 695.208 cm /Im1 Do Q BT 0.12 0 0 -0.12 316.32 686.8201 Tm -0.0002 Tc ()Tj /T8 1 Tf 83.9998 0 TD 0 Tc ()Tj /T6 1 Tf 23.0002 0 TD ()Tj 139.9998 0 TD (sec)Tj ET q 0.48 0 0 -12 375.588 695.208 cm /Im1 Do Q BT 0.12 0 0 -0.12 384 686.8201 Tm ()Tj /T8 1 Tf 84 0 TD ()Tj /T6 1 Tf 22.9998 0 TD ()Tj 141.0002 0 TD (sec)Tj ET q 0.48 0 0 -12 446.028 695.208 cm /Im1 Do Q BT 0.12 0 0 -0.12 464.4 686.8201 Tm ()Tj /T8 1 Tf 41.9998 0 TD ()Tj /T6 1 Tf 23.0002 0 TD (\015)Tj 140.9998 0 TD (min)Tj ET q 0.48 0 0 -12 518.748 695.208 cm /Im1 Do Q q 0.48 0 0 -12 89.268 683.328 cm /Im1 Do Q BT 0.12 0 0 -0.12 96 674.9401 Tm ()Tj ET q 0.48 0 0 -12 106.788 683.328 cm /Im1 Do Q q 0.48 0 0 -12 108.828 683.328 cm /Im1 Do Q BT 0.12 0 0 -0.12 119.88 674.9401 Tm ()Tj /T8 1 Tf 42.0001 0 TD ()Tj /T6 1 Tf 22.9999 0 TD ()Tj 141 0 TD 0.0001 Tc (sec)Tj ET q 0.48 0 0 -12 174.228 683.328 cm /Im1 Do Q BT 0.12 0 0 -0.12 180.48 674.9401 Tm 0 Tc (\012)Tj /T8 1 Tf 84 0 TD ()Tj /T6 1 Tf 23 0 TD ()Tj 140 0 TD (sec)Tj ET q 0.48 0 0 -12 239.748 683.328 cm /Im1 Do Q BT 0.12 0 0 -0.12 250.92 674.9401 Tm ()Tj /T8 1 Tf 41.9998 0 TD ()Tj /T6 1 Tf 23.0002 0 TD ()Tj 141 0 TD -0.0001 Tc (min)Tj ET q 0.48 0 0 -12 310.188 683.328 cm /Im1 Do Q BT 0.12 0 0 -0.12 316.32 674.9401 Tm -0.0002 Tc ()Tj /T8 1 Tf 83.9998 0 TD 0 Tc ()Tj /T6 1 Tf 23.0002 0 TD ()Tj 139.9998 0 TD 0.0001 Tc (min)Tj ET q 0.48 0 0 -12 375.588 683.328 cm /Im1 Do Q BT 0.12 0 0 -0.12 389.04 674.9401 Tm 0 Tc ()Tj /T8 1 Tf 42 0 TD ()Tj /T6 1 Tf 22.9998 0 TD ()Tj 141.0002 0 TD -0.0001 Tc (hours)Tj ET q 0.48 0 0 -12 446.028 683.328 cm /Im1 Do Q BT 0.12 0 0 -0.12 472.08 674.9401 Tm 0 Tc (\012)Tj 141.9998 0 TD (hours)Tj ET q 0.48 0 0 -12 518.748 683.328 cm /Im1 Do Q q 72.72 0 0 -0.48 446.268 671.328 cm /Im1 Do Q q 0.48 0 0 -12 89.268 671.328 cm /Im1 Do Q BT 0.12 0 0 -0.12 96 662.9401 Tm ()Tj ET q 0.48 0 0 -12 106.788 671.328 cm /Im1 Do Q q 0.48 0 0 -12 108.828 671.328 cm /Im1 Do Q BT 0.12 0 0 -0.12 119.88 662.9401 Tm ()Tj /T8 1 Tf 42.0001 0 TD ()Tj /T6 1 Tf 22.9999 0 TD ()Tj 141 0 TD 0.0001 Tc (sec)Tj ET q 0.48 0 0 -12 174.228 671.328 cm /Im1 Do Q BT 0.12 0 0 -0.12 180.48 662.9401 Tm 0 Tc ()Tj /T8 1 Tf 84 0 TD ()Tj /T6 1 Tf 23 0 TD ()Tj 140 0 TD 0.0001 Tc (min)Tj ET q 0.48 0 0 -12 239.748 671.328 cm /Im1 Do Q BT 0.12 0 0 -0.12 250.92 662.9401 Tm 0 Tc ()Tj /T8 1 Tf 41.9998 0 TD ()Tj /T6 1 Tf 23.0002 0 TD ()Tj 141 0 TD -0.0001 Tc (hours)Tj ET q 0.48 0 0 -12 310.188 671.328 cm /Im1 Do Q BT 0.12 0 0 -0.12 316.32 662.9401 Tm -0.0002 Tc ()Tj /T8 1 Tf 83.9998 0 TD 0 Tc ()Tj /T6 1 Tf 23.0002 0 TD (\012)Tj 139.9998 0 TD 0.0001 Tc (hours)Tj ET q 0.48 0 0 -12 375.588 671.328 cm /Im1 Do Q BT 0.12 0 0 -0.12 389.04 662.9401 Tm 0 Tc ()Tj /T8 1 Tf 42 0 TD ()Tj /T6 1 Tf 22.9998 0 TD (\015)Tj 141.0002 0 TD -0.0002 Tc (da)Tj 86 0 TD 0 Tc (ys)Tj ET q 0.48 0 0 -12 446.028 671.328 cm /Im1 Do Q BT 0.12 0 0 -0.12 459.36 662.9401 Tm 0.0002 Tc ()Tj /T8 1 Tf 84 0 TD 0 Tc ()Tj /T6 1 Tf 23.0002 0 TD ()Tj 140.9998 0 TD (da)Tj 86.0002 0 TD (ys)Tj ET q 0.48 0 0 -12 518.748 671.328 cm /Im1 Do Q q 135.96 0 0 -0.48 310.308 659.448 cm /Im1 Do Q q 0.48 0 0 -12 89.268 659.328 cm /Im1 Do Q BT 0.12 0 0 -0.12 96 650.9401 Tm (\015)Tj ET q 0.48 0 0 -12 106.788 659.328 cm /Im1 Do Q q 0.48 0 0 -12 108.828 659.328 cm /Im1 Do Q BT 0.12 0 0 -0.12 114.96 650.9401 Tm 0.0001 Tc ()Tj /T8 1 Tf 84 0 TD 0 Tc ()Tj /T6 1 Tf 23 0 TD ()Tj 140 0 TD 0.0001 Tc (sec)Tj ET q 0.48 0 0 -12 174.228 659.328 cm /Im1 Do Q BT 0.12 0 0 -0.12 185.4 650.9401 Tm 0 Tc (\012)Tj /T8 1 Tf 42.0001 0 TD ()Tj /T6 1 Tf 22.9999 0 TD ()Tj 141 0 TD (hours)Tj ET q 0.48 0 0 -12 239.748 659.328 cm /Im1 Do Q BT 0.12 0 0 -0.12 250.92 650.9401 Tm ()Tj /T8 1 Tf 41.9998 0 TD ()Tj /T6 1 Tf 23.0002 0 TD ()Tj 141 0 TD (da)Tj 85.9998 0 TD (ys)Tj ET q 0.48 0 0 -12 310.188 659.328 cm /Im1 Do Q BT 0.12 0 0 -0.12 316.32 650.9401 Tm -0.0002 Tc (\012)Tj /T8 1 Tf 83.9998 0 TD 0 Tc ()Tj /T6 1 Tf 23.0002 0 TD ()Tj 139.9998 0 TD 0.0002 Tc (da)Tj 86 0 TD 0 Tc (ys)Tj ET q 0.48 0 0 -12 375.588 659.328 cm /Im1 Do Q BT 0.12 0 0 -0.12 386.76 650.9401 Tm -0.0001 Tc (\012)Tj 225 0 TD -0.0002 Tc (da)Tj 86 0 TD 0 Tc (ys)Tj ET q 0.48 0 0 -12 446.028 659.328 cm /Im1 Do Q BT 0.12 0 0 -0.12 464.4 650.9401 Tm (\012)Tj /T8 1 Tf 41.9998 0 TD ()Tj /T6 1 Tf 23.0002 0 TD ()Tj 140.9998 0 TD (y)Tj 42.0002 0 TD (ears)Tj ET q 0.48 0 0 -12 518.748 659.328 cm /Im1 Do Q q 135.96 0 0 -0.48 174.468 647.448 cm /Im1 Do Q q 0.48 0 0 -12 89.268 647.4481 cm /Im1 Do Q BT 0.12 0 0 -0.12 96 639.0601 Tm ()Tj ET q 0.48 0 0 -12 106.788 647.4481 cm /Im1 Do Q q 0.48 0 0 -12 108.828 647.4481 cm /Im1 Do Q BT 0.12 0 0 -0.12 119.88 639.0601 Tm ()Tj /T8 1 Tf 42.0001 0 TD ()Tj /T6 1 Tf 22.9999 0 TD (\012)Tj 141 0 TD 0.0001 Tc (min)Tj ET q 0.48 0 0 -12 174.228 647.4481 cm /Im1 Do Q BT 0.12 0 0 -0.12 188.16 639.0601 Tm -0.0001 Tc ()Tj 182.9999 0 TD 0 Tc (da)Tj 86.0001 0 TD -0.0001 Tc (ys)Tj ET q 0.48 0 0 -12 239.748 647.4481 cm /Im1 Do Q BT 0.12 0 0 -0.12 248.76 639.0601 Tm 0.0001 Tc ()Tj 224.0002 0 TD 0 Tc (da)Tj 85.9998 0 TD (ys)Tj ET q 0.48 0 0 -12 310.188 647.4481 cm /Im1 Do Q BT 0.12 0 0 -0.12 329.04 639.0601 Tm (\015)Tj 140.9998 0 TD (y)Tj 42.0002 0 TD (ears)Tj ET q 0.48 0 0 -12 375.588 647.4481 cm /Im1 Do Q BT 0.12 0 0 -0.12 384 639.0601 Tm ()Tj /T8 1 Tf 84 0 TD ()Tj /T6 1 Tf 22.9998 0 TD ()Tj 141.0002 0 TD (y)Tj 41.9998 0 TD (ears)Tj ET q 0.48 0 0 -12 446.028 647.4481 cm /Im1 Do Q BT 0.12 0 0 -0.12 462.12 639.0601 Tm 0.0001 Tc (\015)Tj 225 0 TD 0 Tc (y)Tj 42.0002 0 TD (ears)Tj ET q 0.48 0 0 -12 518.748 647.4481 cm /Im1 Do Q q 0.48 0 0 -12 89.268 635.4481 cm /Im1 Do Q BT 0.12 0 0 -0.12 96 627.0601 Tm (\012)Tj ET q 0.48 0 0 -12 106.788 635.4481 cm /Im1 Do Q q 0.48 0 0 -12 108.828 635.4481 cm /Im1 Do Q BT 0.12 0 0 -0.12 119.88 627.0601 Tm ()Tj /T8 1 Tf 42.0001 0 TD ()Tj /T6 1 Tf 22.9999 0 TD ()Tj 141 0 TD (hours)Tj ET q 0.48 0 0 -12 174.228 635.4481 cm /Im1 Do Q BT 0.12 0 0 -0.12 183.24 627.0601 Tm ()Tj 224 0 TD (da)Tj 86.0001 0 TD -0.0001 Tc (ys)Tj ET q 0.48 0 0 -12 239.748 635.4481 cm /Im1 Do Q BT 0.12 0 0 -0.12 246 627.0601 Tm -0.0002 Tc ()Tj /T8 1 Tf 83.9998 0 TD 0 Tc ()Tj /T6 1 Tf 23.0002 0 TD ()Tj 140 0 TD (y)Tj 41.9998 0 TD -0.0001 Tc (ears)Tj ET q 0.48 0 0 -12 310.188 635.4481 cm /Im1 Do Q BT 0.12 0 0 -0.12 319.08 627.0601 Tm 0.0001 Tc ()Tj 224 0 TD 0 Tc (y)Tj 42.0002 0 TD (ears)Tj ET q 0.48 0 0 -12 375.588 635.4481 cm /Im1 Do Q BT 0.12 0 0 -0.12 381.84 627.0601 Tm 0.0001 Tc (\015)Tj 266.0002 0 TD 0 Tc (y)Tj 41.9998 0 TD (ears)Tj ET q 0.48 0 0 -12 446.028 635.4481 cm /Im1 Do Q BT 0.12 0 0 -0.12 452.16 627.0601 Tm ()Tj 307.9998 0 TD (y)Tj 42.0002 0 TD (ears)Tj ET q 0.48 0 0 -12 518.748 635.4481 cm /Im1 Do Q q 429.48 0 0 -0.48 89.508 623.568 cm /Im1 Do Q BT 0.12 0 0 -0.12 72 605.22 Tm (T)Tj 53 0 TD (able)Tj 182.0001 0 TD -0.0001 Tc ()Tj 113.9999 0 TD 0 Tc (Time)Tj 223.0001 0 TD (required)Tj 331.9999 0 TD (to)Tj 108.0001 0 TD -0.0001 Tc (test)Tj 168 0 TD 0 Tc (a)Tj 76 0 TD (single)Tj 237 0 TD (passw)Tj 212 0 TD [(ord)-31999.8(against)]TJ 445.9998 0 TD (a)Tj 76 0 TD 0.0001 Tc [(sp)-1999.7(ecied)]TJ 341.0002 0 TD 0 Tc (passw)Tj 212 0 TD [(ord)-32000(space)]TJ 381 0 TD (when)Tj 223 0 TD [(b)-2000(eing)]TJ 230.9995 0 TD 0.0003 Tc (able)Tj 181.0005 0 TD -0.0005 Tc (to)Tj -3796 100 TD 2.0001 Tc [(pe)2000.1(r)2000.2(f)2000.1(o)2000(r)2000.2(m)]TJ 319.0001 0 TD -0.0001 Tc ()Tj /T8 1 Tf 125.9999 0 TD 0 Tc ( )Tj /T6 1 Tf 37 0 TD 0.0001 Tc [()-28999.8(e)0.1(v)]TJ 231 0 TD 0 Tc (aluations)Tj 361.0001 0 TD -0.0001 Tc (of)Tj /T7 1 Tf 98.9999 0 TD 0 Tc (crypt)Tj /T6 1 Tf 224 0 TD [(p)-2000(e)0(r)-32000(second )]TJ 465.0001 0 TD (P)Tj 55 0 TD (assw)Tj 165.9998 0 TD [(ord)-30000.2(s)0(paces)-31000(ab)-2000(o)]TJ 540.0002 0 TD (v)Tj 41.9998 0 TD 31.0002 Tc [(et)31000.4(h)31000(e)]TJ 216 0 TD 0.0001 Tc [(separation)-30999.7(c)0.1(an)-31999.9(b)-1999.7(e)]TJ 682.0002 0 TD 0 Tc (searc)Tj 180 0 TD (hed)Tj -3743 99 TD [(completely)-31000(within)-31000()-30000(d)-0.1(a)]TJ 840 0 TD (ys )Tj 146 0 TD (Ho)Tj 102 0 TD (w)Tj 58 0 TD (ev)Tj 79 0 TD [(er)-27999.9(this)-31000(do)-2000(es)-31000.2(not)-30000(imply)]TJ 841.0001 0 TD [(that)-31000(passw)]TJ 395 0 TD -0.0001 Tc [(ords)-28000.3(c)]TJ 216.9998 0 TD 0 Tc [(hosen)-30000(from)-30000(b)-2000(e)0(lo)]TJ 581.0002 0 TD [(w)-30999.8(t)-0.2(he)-31000.2(separation)]TJ -3259 100 TD [(are)-27000.1(s)0.1(ecure)-26000.1(a)0.1(gainst)-27000.1(passw)]TJ 887.0001 0 TD [(ord)-24999.9(guessing )]TJ 506.9999 0 TD [(These)-27000(times)-28000.2(are)-26999.8(normal)-26000(for)-26999.8(t)-0.2(raditional)]TJ /T7 1 Tf 1419.9999 0 TD (crypt)Tj /T6 1 Tf 219.0002 0 TD (no)Tj 85.9998 0 TD (w)Tj 58 0 TD (ada)Tj 128.0002 0 TD (ys )Tj -3305 265 TD [(This)-21999.9(task)-22000(is)-22000(facilitated)-22000(b)]TJ 863 0 TD [(y)-22000(the)-23000(fact)-22000(that)-22000.1(users)-21999.8(tend)-22000(to)]TJ -863 100 TD (c)Tj 35.0001 0 TD [(ho)-1999.9(ose)-30000.1(p)0(redictable)-31000.1(passw)]TJ 877.0001 0 TD (ords )Tj 221.9999 0 TD [(In)-31000(the)-31000.1(follo)]TJ 405.9999 0 TD [(wing)-30999.8(w)]TJ 283.0002 0 TD (e)Tj -1823.0001 100 TD [(will)-20999.9(presen)]TJ 380 0 TD [(t)-21000(commonly)-20000.1(used)-21000(tec)]TJ 732.0001 0 TD [(hniques)-21000(and)-21000.2(e)0(v)]TJ 526.9998 0 TD (aluate)Tj -1638.9999 99 TD (ho)Tj 86 0 TD [(w)-27000.1(t)0.1(hey)-28000(a)0.1(ect)-27000(the)-28000(securit)]TJ 879 0 TD 27 Tc [(yo)27000.1(f)]TJ /T7 1 Tf 166.0001 0 TD 0 Tc (b)Tj 33.9999 0 TD (crypt)Tj /T6 1 Tf 183 0 TD ( )Tj -1348 199 TD [(The)-24000.1(most)-23000.1(c)0.1(ommon)-23000(m)0.1(etho)-1999.8(d)-24000.1(i)0(s)-23000(k)0(no)]TJ 1201 0 TD [(wn)-23000(as)-23000(a)-23000(d)0.2(ictionary)]TJ -1201 100 TD (attac)Tj 183 0 TD (k )Tj 141.9999 0 TD 0.0001 Tc (It)Tj 104.0001 0 TD 0 Tc (is)Tj 96.0001 0 TD (based)Tj 244.9999 0 TD (on)Tj 128 0 TD (the)Tj 156 0 TD (kno)Tj 130 0 TD (wledge)Tj 285.0001 0 TD -0.0001 Tc (that)Tj 193 0 TD 0 Tc (man)Tj 155 0 TD (y)Tj -1817.0001 100 TD (users)Tj 216.0001 0 TD (c)Tj 35 0 TD [(ho)-2000(ose)]TJ 234.9999 0 TD (their)Tj 205 0 TD (passw)Tj 212 0 TD [(ords)-31999.9(i)-0.1(n)]TJ 290.0001 0 TD (a)Tj 75.9999 0 TD (v)Tj 42.0001 0 TD -0.0001 Tc (ery)Tj 146.9998 0 TD 0 Tc (predictable)Tj -1457.9999 99 TD (w)Tj 58 0 TD (a)Tj 40.0001 0 TD (y)Tj 37 0 TD ( )Tj 57.9999 0 TD [(Often)-25000.1(a)-24999.9(u)0(sers)-24000.1(p)0.1(assw)]TJ 738.0001 0 TD [(ord)-22999.9(c)-0.1(an)-25000(b)-2000(e)-25000(found)-24999.8(in)-26000(a)-23999.8(d)-0.2(ic)]TJ -931.0001 100 TD [(tionary)-25000(o)-0.1(r)-24999.9(i)-0.1(s)-26000(t)0.1(he)-26999.9(name)-26000.1(of)-26000.1(a)-25999.9(close)-25000(relativ)]TJ 1421 0 TD 0.0001 Tc [(e)-24999.7(w)-0.1(ith)-25999.7(s)0.1(mall)]TJ -1421 100 TD 0 Tc [(mo)-2000.1(dications)]TJ /T7 1 Tf 528.0001 0 TD (e g )Tj /T6 1 Tf 175.9999 0 TD [(Susan)-19000.1(or)-21000(nemei )]TJ 890.0001 0 TD [(The)-21999.8(at)]TJ -1594.0001 99 TD (tac)Tj 109 0 TD (k)Tj 42.0001 0 TD [(er)-24999.9(compiles)-26000(a)-26000.1(l)0.1(ist)-27000(of)-27000(common)-26000(names)-26000.1(and)-25999.8(w)]TJ 1532.9998 0 TD (ords )Tj -1683.9999 100 TD (F)Tj 46.9999 0 TD 0.0001 Tc (or)Tj 111.0001 0 TD 0 Tc (a)Tj 79 0 TD (giv)Tj 107.0001 0 TD -0.0001 Tc (en)Tj 119.0001 0 TD 0 Tc (salt)Tj 191.9999 0 TD (the)Tj 153 0 TD (w)Tj 58 0 TD (ords)Tj 189.0001 0 TD -0.0002 Tc (in)Tj 107 0 TD -0.0001 Tc (the)Tj 151.9999 0 TD 0.0001 Tc (list)Tj 148.0001 0 TD 0 Tc (are)Tj 148 0 TD (hashed)Tj -1610.0001 99 TD (with)Tj 196 0 TD (the)Tj 149.0001 0 TD (passw)Tj 211.9999 0 TD [(ord)-32000(sc)]TJ 221.0001 0 TD (heme)Tj 222.9999 0 TD (and)Tj 168 0 TD (compared)Tj 385.0001 0 TD (with)Tj 195 0 TD -0.0001 Tc (en)Tj -1749.0001 100 TD 0 Tc [(tries)-30000.1(o)0.1(f)-31000(the)-32000(same)-30000.1(salt)-31000(in)-31000(the)-31000(passw)]TJ 1263 0 TD [(ord)-29000(le )]TJ 325.9999 0 TD 0.0001 Tc [(If)-30999.9(there)]TJ -1588.9999 100 TD [(is)-26999.8(a)-27999.9(m)0.2(atc)]TJ 331 0 TD 0 Tc [(h)-27000(the)-28000(plain)]TJ 417 0 TD [(text)-28000(passw)]TJ 385 0 TD [(ord)-25000(has)-26999.9(b)-2000(een)-28000(found )]TJ -1133 199 TD (Commonly)Tj 388.0001 0 TD ()Tj 67.9999 0 TD (lists)Tj 186 0 TD (of)Tj 108.0001 0 TD -0.0001 Tc (lik)Tj 87.9999 0 TD 0 Tc (ely)Tj 146 0 TD (passw)Tj 212 0 TD (ords)Tj 193 0 TD (con)Tj 123.0001 0 TD -0.0001 Tc (tain)Tj 183.9998 0 TD 0 Tc (h)Tj 44 0 TD (un)Tj -1739.9999 100 TD (dreds)Tj 230 0 TD 0.0001 Tc (of)Tj 103 0 TD 0 Tc (thousands)Tj 402 0 TD (of)Tj 102 0 TD (w)Tj 58 0 TD (ords )Tj 238 0 TD (A)Tj 98.0001 0 TD (dictionary)Tj 402.9998 0 TD 0.0001 Tc (attac)Tj 183.0002 0 TD 0 Tc (k)Tj -1817.0001 98.9998 TD 0.0001 Tc (is)Tj 91.0001 0 TD -0.0001 Tc (only)Tj 188.9999 0 TD 0 Tc (feasible)Tj 301 0 TD (when)Tj 224 0 TD (the)Tj 150.0001 0 TD (onew)Tj 210.9999 0 TD (a)Tj 40.0001 0 TD (y)Tj 76.9999 0 TD (function)Tj 331.9999 0 TD 0.0001 Tc (can)Tj 160.0002 0 TD 2 Tc (be)Tj -1775.0001 100 TD 0 Tc (computed)Tj 394.0001 0 TD (quic)Tj 147.9999 0 TD (kly)Tj 104 0 TD ( )Tj /T7 1 Tf 93 0 TD (Bcrypt)Tj /T6 1 Tf 249 0 TD (s)Tj 95 0 TD (cost)Tj 183 0 TD (can)Tj 163 0 TD 1.9998 Tc (be)Tj 123.9999 0 TD 0.0001 Tc (made)Tj 233.0002 0 TD -0.0002 Tc (as)Tj -1786.0001 99 TD 0 Tc [(high)-27000(as)-26000(tolerable)-25000.1(b)]TJ 669.0001 0 TD [(y)-26999.9(l)0(egitimate)-27000(u)0(sers)-26000.1(rendering)-25000(d)-0.2(ic)]TJ -669.0001 100 TD [(tionary)-27000(a)0(ttac)]TJ 472.0001 0 TD [(ks)-26000(impractically)-26999.9(slo)]TJ 699.9999 0 TD (w )Tj /T17 1 Tf -1172 315.0001 TD ( )Tj 292.0001 0 TD [(Salt)-32000(Collisions)]TJ /T6 1 Tf -292.0001 253 TD (A)Tj /T7 1 Tf 98.0001 0 TD (salt)Tj 162.9999 0 TD (c)Tj 34.0001 0 TD [(ol)-4000(lision)]TJ /T6 1 Tf 305.0001 0 TD 2 Tc [(oc)2000(c)2000.1(u)2000(r)1999.9(s)]TJ 264.9999 0 TD 0 Tc (when)Tj 225 0 TD (t)Tj 30 0 TD (w)Tj 57.9999 0 TD (o)Tj 78.0002 0 TD (passw)Tj 212 0 TD (ord)Tj 154 0 TD -0.0001 Tc [(enco)-2000.1(d)]TJ -1622.0001 100 TD 0 Tc [(ings)-30999.9(use)-31000(the)-30999.9(same)-31000(salt )]TJ 880 0 TD (Ideally)Tj 238.0001 0 TD [()-31999.9(t)-0.1(here)-31000(should)-31000(b)-2000(e)-31000(no)]TJ /T7 1 Tf -1118.0001 100 TD (salt)Tj 165 0 TD (c)Tj 34 0 TD [(ol)-4000(lisions)]TJ /T6 1 Tf 295.0001 0 TD (the)Tj 238.9999 0 TD (salts)Tj 202 0 TD (of)Tj 106 0 TD (dieren)Tj 267.9999 0 TD (t)Tj 70.0001 0 TD -0.0001 Tc (passw)Tj 211.9999 0 TD 0 Tc (ord)Tj 158.0002 0 TD -0.0001 Tc (en)Tj -1749.0001 99 TD 0 Tc [(co)-2000(dings)]TJ 313.0001 0 TD (should)Tj 278.9999 0 TD 2 Tc (be)Tj 128 0 TD 0 Tc (dieren)Tj 268 0 TD (t)Tj 76 0 TD (ev)Tj 79.0001 0 TD (en)Tj 125 0 TD (across)Tj 261 0 TD -0.0001 Tc (passw)Tj 211.9998 0 TD 0.0001 Tc (ord)Tj -1740.9999 100 TD 0 Tc (les )Tj 204.0001 0 TD [(Because)-29000(traditional)]TJ /T7 1 Tf 731.9999 0 TD (crypt)Tj /T6 1 Tf 221 0 TD [(uses)-29000(only)-29000(\012)-28000(d)0.2(if)]TJ -1157 99 TD (feren)Tj 176.0001 0 TD (t)Tj 75.9999 0 TD (salts)Tj 234 0 TD (it)Tj 99 0 TD (leads)Tj 225 0 TD (to)Tj 118 0 TD (man)Tj 155 0 TD (y)Tj 88 0 TD (collisions)Tj 394.9999 0 TD (as)Tj 118 0 TD (illus)Tj -1683.9999 100 TD [(trated)-29000(in)-30000.1(Figure)-28000( )]TJ 720 0 TD (T)Tj 53 0 TD [(o)-29000(optimize)-29000(dictionary)-27999.8(attac)]TJ 988.0001 0 TD (ks)Tj -1761.0001 100 TD [(an)-26000(attac)]TJ 297.0001 0 TD (k)Tj 41.9999 0 TD [(er)-24999.9(can)-26000(group)-25000(encrypted)-25999.8(passw)]TJ 1076 0 TD [(ords)-24000(b)]TJ 222.0001 0 TD 0.0001 Tc [(y)-25999.9(s)0.3(alt)]TJ -1637.0001 99.0001 TD (and)Tj 174 0 TD (hash)Tj 206 0 TD 0 Tc (eac)Tj 114.0001 0 TD (h)Tj 84.9999 0 TD (candidate)Tj 390 0 TD (passw)Tj 212.0001 0 TD (ord)Tj 158.9999 0 TD (from)Tj 208.0001 0 TD (a)Tj 81 0 TD (dictio)Tj -1629.0001 100 TD [(nary)-27000.1(only)-28000.1(once)-26999.9(p)-2000(e)0(r)-28000(salt )]TJ 901 0 TD [(The)-28000(resulting)-27000(sp)-1999.8(eedup)-28000(c)0(an)]TJ 1109.0001 -3657 TD [(roughly)-26000(b)-2000(e)-28000(determined)-28000(a)0.2(s)]TJ 538 158 TD (n)Tj 44 0 TD -0.0002 Tc (um)Tj 113 0 TD 1.9998 Tc [(be)1999.8(r)-26000.2(o)1999.6(f)-25000(p)1999.6(a)1999.8(s)2000(s)1999.6(w)]TJ 452 0 TD -0.0001 Tc (ords)Tj ET q 106.44 0 0 -0.48 370.188 514.608 cm /Im1 Do Q BT 0.12 0 0 -0.12 370.2 504.9 Tm 0 Tc (n)Tj 44 0 TD (um)Tj 113 0 TD [(b)-1999.8(e)0(r)-27000.2(o)0(f)-27999.8(d)-0.2(ieren)]TJ 507.9998 0 TD -0.0001 Tc [(t)-28000.3(salts)]TJ /T8 1 Tf 232.0002 -57.0005 TD 0 Tc ()Tj /T6 1 Tf -1372 298.0002 TD -0.0002 Tc (If)Tj 87 0 TD 0 Tc [(salts)-30000(are)-31000(generated)-30000(with)-32000(a)-30000(g)0(o)-2000(o)-2000(d)-30999.8(random)-30000(n)]TJ 1542 0 TD (um)Tj 112.9995 0 TD 2.0005 Tc [(be)2000.5(r)]TJ -1741.9995 100 TD 0 Tc [(generator)-21000(the)-23000.2(exp)-1999.8(ected)-22999.8(n)]TJ 911 0 TD (um)Tj 113 0 TD [(b)-2000(e)0.2(r)-22000.2(o)0(f)-21999.8(d)-0.2(ieren)]TJ 497 0 TD [(t)-23000(salts)-22000(for)]TJ /T8 1 Tf -1521 99 TD (n)Tj /T6 1 Tf 77.9998 0 TD 0.0001 Tc (passw)Tj 212.0002 0 TD -0.0001 Tc [(ord)-25000.1(en)]TJ 226.9998 0 TD 0 Tc [(tries)-27000.2(w)0(ith)]TJ /T8 1 Tf 374 0 TD (s)Tj /T6 1 Tf 67.0002 0 TD [(p)-2000(o)0(ssible)-27000(salts)-27000(i)0.2(s)]TJ /T8 1 Tf -840.0002 433.0002 TD 5.0002 Tc (EV)Tj /T6 1 Tf 133.0002 0 TD 0 Tc ()Tj /T8 1 Tf 32 0 TD [(n )-14000(s)]TJ /T6 1 Tf 125.9998 0 TD 24.0002 Tc ()Tj /T9 1 Tf 143.0002 -103.0002 TD 0 Tc (n)Tj /T10 1 Tf 40.9998 0 TD ()Tj /T11 1 Tf 52.0002 0 TD ( )Tj /T13 1 Tf -90.0002 25 TD (X)Tj /T9 1 Tf 6.0002 176 TD (i)Tj /T11 1 Tf 22.9998 0 TD ( )Tj /T13 1 Tf 94 -189.9998 TD ()Tj /T8 1 Tf 60.0002 36 TD (s)Tj /T12 1 Tf 57 0 TD ()Tj /T6 1 Tf 82.9998 0 TD ()Tj ET q 21.84 0 0 -0.48 401.748 402.888 cm /Im1 Do Q BT /T8 1 Tf 0.12 0 0 -0.12 410.28 393.3 Tm (s)Tj /T13 1 Tf 121 -149 TD ()Tj /T9 1 Tf 49 18 TD (i)Tj /T6 1 Tf 51 74 TD ()Tj /T8 1 Tf 88 0 TD (s)Tj /T12 1 Tf 57.0002 0 TD ()Tj /T6 1 Tf 83 0 TD ()Tj /T8 1 Tf 31.9998 0 TD (s)Tj /T12 1 Tf 58.0002 0 TD ()Tj /T6 1 Tf 83 0 TD ()Tj /T9 1 Tf 73.9995 -34.0002 TD (n)Tj /T8 1 Tf 45.0005 34.0002 TD (s)Tj /T11 1 Tf 39 -34.0002 TD ( )Tj /T10 1 Tf 33 0 TD ()Tj /T9 1 Tf 52 0 TD (n)Tj /T8 1 Tf 44.9995 34.0002 TD ()Tj /T6 1 Tf -1718.9995 358 TD 27 Tc [(I)27000.2(na)26999.8()]TJ /T8 1 Tf 256 0 TD 0 Tc ( )Tj /T6 1 Tf 36.9998 0 TD 0.0001 Tc [()-24999.9(e)0.1(n)]TJ 232.0002 0 TD 0 Tc [(try)-25999.8(passw)]TJ 346.9998 0 TD [(ord)-25000()-0.2(le)-28000(a)-25999.8(s)-0.2(pace)-26999.8(of)-27000()]TJ /T11 1 Tf 729.0002 -30.0002 TD ( )Tj /T6 1 Tf 97 30.0002 TD 0.0001 Tc (salts)Tj -1698 100 TD 0 Tc [(ensures)-23000(with)-25000.2(high)-24000(probabilit)]TJ 1008.9998 0 TD 23.0002 Tc [(yt)23000.2(h)23000.4(a)23000.2(t)-999.8(e)23000(v)]TJ 322.0002 0 TD 0 Tc [(ery)-22999.8(s)0(alt)-23000(will)-25000(b)-2000(e)]TJ -1331 100 TD (unique )Tj 300 0 TD (F)Tj 46.9998 0 TD 0.0002 Tc [(or)-19999.6()]TJ /T11 1 Tf 137 -31 TD 0 Tc ( )Tj /T6 1 Tf 90.0002 31 TD -0.0001 Tc [(p)-1999.9(o)-0.3(ssible)-20000.1(salts)-22000.3(on)-20000.3(the)-21000.1(o)-0.1(ther)-20000.1(hand)-21000.6(w)]TJ 1249 0 TD 0 Tc (e)Tj -1823 99 TD -0.0001 Tc [(can)-28000.1(o)-0.3(nly)-29000.1(e)-0.1(xp)-2000.1(ect)-29000.1(a)0.1(b)-2000.1(o)-0.3(ut)-29000.1()]TJ /T8 1 Tf 882 0 TD 0 Tc ( )Tj /T6 1 Tf 37 0 TD [(\012\012)-27000.2(d)0.2(ieren)]TJ 420.9998 0 TD [(t)-29000.2(salts )]TJ 287.0002 0 TD (A)Tj 60 0 TD 29 Tc (t)Tj /T11 1 Tf 103 -30 TD 0 Tc ()Tj /T6 1 Tf -1790 130 TD [(p)-1999.8(o)-0.2(ssible)-22000.2(salts)-22000(t)0.2(he)-23000(n)]TJ 696.9998 0 TD (um)Tj 113 0 TD -0.0001 Tc [(b)-2000.3(e)-0.1(r)-22000.1(b)-2000.1(ecomes)-21000.1()]TJ /T8 1 Tf 548.0002 0 TD 0 Tc ( )Tj /T6 1 Tf 37 0 TD -0.0001 Tc (\012\012 )Tj 182 0 TD 0 Tc [(In)-22000(prac)]TJ -1577 99 TD [(tice)-28000(ho)]TJ 265.9998 0 TD (w)Tj 58.0002 0 TD -0.0002 Tc (ev)Tj 78.9998 0 TD 0 Tc [(er)-25000.2(w)]TJ 176 0 TD -0.0001 Tc [(e)-27000.1()-0.3(nd)-28000.1(that)-28000.3(the)-27000.1(n)]TJ 596.0002 0 TD -0.0002 Tc (um)Tj 113 0 TD 0 Tc [(b)-2000(e)0(r)-26999.8(o)-0.2(f)-28000(salt)-27000(colli)]TJ -1288 100 TD [(sions)-25999.8(is)-25999.8(generally)-25000.2(higher)-25000(than)-27000.2(exp)-2000(ected )]TJ 1459 0 TD [(The)-27000(reason)]TJ -1459 100 TD [(is)-30000(that)-29999.8(man)]TJ 422.9998 0 TD [(y)-30000(o)-0.2(p)-2000(erating)-28999.8(systems)-29000(generate)-29000(p)-2000(o)-2000(o)0(r)-29000(r)0.5(an)]TJ -422.9998 98.9998 TD [(dom)-27000(n)]TJ 227.9998 0 TD 0.0002 Tc (um)Tj 113 0 TD 2.0002 Tc [(be)2000.2(r)2000.4(s)2000.2( )]TJ /T17 1 Tf -340.9998 314.0001 TD 0 Tc ( )Tj 291.9998 0 TD [(Precomputing)-30000.2(D)0.2(ictionaries)]TJ /T6 1 Tf -291.9998 253 TD [(Using)-31000(precomputation)-30000.2(an)-31000.2(attac)]TJ 1164.9998 0 TD (k)Tj 42.0002 0 TD [(er)-29000(can)-30000(build)-31000(a)-31000(l)0(ist)]TJ -1207 100 TD [(of)-29000.2(the)-29000(h)0.2(ashes)-27999.8(of)-29000.2(ev)]TJ 679.9998 0 TD [(ery)-27999.8(c)0(ommon)-28000(p)-0.2(assw)]TJ 687 0 TD [(ord)-27000(under)-29000(ev)]TJ -1366.9998 100 TD (ery)Tj 150 0 TD -0.0001 Tc [(p)-1999.9(o)-0.3(ssible)]TJ 320 0 TD 0 Tc (salt)Tj 192 0 TD (and)Tj 170 0 TD -0.0001 Tc (store)Tj 212 0 TD 0 Tc (this)Tj 170.9998 0 TD 0.0001 Tc (list)Tj 147.0002 0 TD -0.0002 Tc (on)Tj 124 0 TD -0.0003 Tc (mass)Tj 213 0 TD (data)Tj -1699 99 TD 0 Tc (storage )Tj 326 0 TD (In)Tj 74 0 TD (v)Tj 41.9998 0 TD [(erting)-28999.8(the)-29999.8(h)-0.2(ash)-30000(o)0.2(f)-30000.2(a)-30000(common)-29000(passw)]TJ 1299.0002 0 TD (ord)Tj -1741 100 TD 0.0001 Tc (then)Tj 194 0 TD 0 Tc [(b)-1999.8(ecomes)]TJ 335.9998 0 TD 32 Tc [(as)31999.8(i)32000.2(m)32000(p)31999.8(l)32000(e)]TJ 338 0 TD 0 Tc [(lo)-2000(okup)]TJ 278 0 TD 0.0002 Tc (in)Tj 102.0002 0 TD 0 Tc (a)Tj 75 0 TD -0.0001 Tc (database)Tj 376 0 TD 0 Tc (with)Tj -1699 99 TD [(little)-27999.8(computational)-27000(cost )]TJ 0 200 TD (The)Tj 184 0 TD -0.0001 Tc (\012)Tj 206.9998 0 TD 0 Tc (edition)Tj 290.0002 0 TD (of)Tj 108 0 TD -0.0001 Tc (the)Tj 156.9998 0 TD 0 Tc (W)Tj 78.0002 0 TD (ebster)Tj 259 0 TD (Dictionary)Tj 425 0 TD (con)Tj -1708 99 TD [(tains)-23999.8(a)-0.2(fter)-23000.2(truncation)-22999.8(to)-23000()-23999.8(c)]TJ 1014.9998 0 TD [(haracters)-21000(a)-0.2(nd)-23000(duplicate)]TJ -1014.9998 100 TD (remo)Tj 178.9998 0 TD (v)Tj 39 0 TD 0.0001 Tc (al)Tj 133.0002 0 TD 0 Tc (\015\012)Tj 313.9998 0 TD (unique)Tj 285.0002 0 TD (en)Tj 80.9998 0 TD (tries )Tj 262 0 TD (Using)Tj 248.0002 0 TD (standard)Tj ET endstream endobj 50 0 obj << /ProcSet [/PDF /Text /ImageB ] /Font << /T6 9 0 R /T7 10 0 R /T8 19 0 R /T9 20 0 R /T10 21 0 R /T11 25 0 R /T12 26 0 R /T13 27 0 R /T17 39 0 R >> /XObject << /Im1 30 0 R >> /ExtGState << /GS1 11 0 R >> >> endobj 52 0 obj << /Length 36585 >> stream 0 G 0 J 0 j 0.451 w 10 M []0 d /GS1 gs 1 i 127.7 702.072 m 132.206 702.072 l 127.7 631.415 m 132.206 631.415 l 283.374 631.415 m 278.868 631.415 l S [0.901 3.605 ]3.605 d 127.7 654.967 m 283.374 654.967 l S []0 d 127.7 654.967 m 132.206 654.967 l 283.374 654.967 m 278.868 654.967 l S [0.901 3.605 ]3.605 d 127.7 678.52 m 283.374 678.52 l S []0 d 127.7 678.52 m 132.206 678.52 l 283.374 678.52 m 278.868 678.52 l S [0.901 3.605 ]3.605 d 127.7 702.072 m 283.374 702.072 l 127.7 631.415 m 283.374 631.415 l S []0 d 283.374 702.072 m 278.868 702.072 l S [0.901 3.605 ]3.605 d 127.7 725.564 m 283.374 725.564 l S []0 d 127.7 725.564 m 132.206 725.564 l 283.374 725.564 m 278.868 725.564 l S [0.901 3.605 ]3.605 d 127.7 631.415 m 127.7 727.848 l S []0 d 127.7 631.415 m 127.7 635.921 l 127.7 727.848 m 127.7 723.341 l S [0.901 3.605 ]3.605 d 169.217 631.415 m 169.217 727.848 l S []0 d 169.217 631.415 m 169.217 635.921 l 169.217 727.848 m 169.217 723.341 l S [0.901 3.605 ]3.605 d 210.734 631.415 m 210.734 727.848 l S []0 d 210.734 631.415 m 210.734 635.921 l 210.734 727.848 m 210.734 723.341 l S [0.901 3.605 ]3.605 d 252.251 631.415 m 252.251 727.848 l S []0 d 252.251 631.415 m 252.251 635.921 l 252.251 727.848 m 252.251 723.341 l 127.7 631.415 155.674 96.433 re 127.7 631.415 m 127.7 631.415 l 127.94 631.895 l 128 632.136 l 128.36 632.857 l 128.421 633.097 l 128.541 633.277 l 128.661 633.518 l 128.721 633.758 l 129.081 634.479 l 129.142 634.659 l 129.502 635.38 l 129.562 635.56 l 129.802 636.041 l 129.863 636.281 l 129.983 636.462 l 130.223 636.942 l 130.283 637.123 l 130.523 637.603 l 130.644 637.783 l 130.704 638.024 l 130.824 638.264 l 130.944 638.444 l 131.004 638.685 l 131.124 638.925 l 131.244 639.105 l 131.365 639.346 l 131.425 639.526 l 131.665 640.007 l 131.785 640.187 l 131.845 640.427 l 131.965 640.607 l 132.086 640.848 l 132.146 641.028 l 132.266 641.268 l 132.386 641.448 l 132.506 641.689 l 132.566 641.869 l 132.686 642.109 l 132.807 642.29 l 132.927 642.53 l 132.987 642.71 l 133.107 642.951 l 133.227 643.131 l 133.287 643.371 l 133.528 643.732 l 133.648 643.972 l 133.708 644.152 l 133.828 644.393 l 134.068 644.753 l 134.128 644.993 l 134.249 645.174 l 134.369 645.414 l 134.429 645.594 l 134.549 645.774 l 134.669 646.015 l 134.789 646.195 l 134.849 646.375 l 134.97 646.556 l 135.09 646.796 l 135.21 646.976 l 135.27 647.156 l 135.39 647.397 l 135.51 647.577 l 135.57 647.757 l 135.691 647.937 l 135.811 648.178 l 135.931 648.358 l 135.991 648.538 l 136.111 648.719 l 136.231 648.959 l 136.351 649.139 l 136.412 649.319 l 136.652 649.68 l 136.712 649.86 l 136.832 650.1 l 137.072 650.461 l 137.133 650.641 l 137.493 651.182 l 137.553 651.422 l 137.793 651.783 l 137.854 651.963 l 138.214 652.504 l 138.274 652.684 l 138.635 653.225 l 138.695 653.405 l 138.935 653.766 l 138.995 653.946 l 139.356 654.486 l 139.416 654.667 l 139.776 655.208 l 139.836 655.388 l 140.077 655.748 l 140.137 655.928 l 140.497 656.469 l 140.557 656.649 l 140.677 656.77 l 140.918 657.13 l 140.978 657.31 l 141.218 657.671 l 141.278 657.851 l 141.398 657.971 l 141.639 658.332 l 141.699 658.512 l 141.819 658.692 l 141.939 658.873 l 142.059 658.993 l 142.119 659.173 l 142.24 659.353 l 142.36 659.533 l 142.42 659.714 l 142.54 659.834 l 142.78 660.194 l 142.84 660.375 l 142.961 660.495 l 143.201 660.855 l 143.261 660.975 l 143.501 661.336 l 143.561 661.516 l 143.682 661.636 l 143.922 661.997 l 143.982 662.117 l 144.222 662.478 l 144.342 662.598 l 144.403 662.778 l 144.523 662.958 l 144.643 663.078 l 144.703 663.259 l 144.823 663.379 l 145.063 663.739 l 145.124 663.859 l 145.364 664.22 l 145.484 664.34 l 145.544 664.52 l 145.664 664.641 l 145.784 664.821 l 145.845 664.941 l 145.965 665.121 l 146.085 665.241 l 146.205 665.422 l 146.265 665.602 l 146.385 665.722 l 146.505 665.902 l 146.626 666.022 l 146.686 666.203 l 146.806 666.323 l 146.926 666.503 l 146.986 666.623 l 147.106 666.803 l 147.226 666.924 l 147.347 667.104 l 147.407 667.224 l 147.527 667.344 l 147.647 667.524 l 147.767 667.645 l 147.827 667.825 l 147.947 667.945 l 148.068 668.125 l 148.128 668.245 l 148.248 668.426 l 148.488 668.666 l 148.548 668.846 l 148.668 668.966 l 148.789 669.147 l 148.909 669.267 l 148.969 669.387 l 149.089 669.567 l 149.209 669.687 l 149.269 669.808 l 149.389 669.988 l 149.51 670.108 l 149.63 670.228 l 149.69 670.408 l 149.81 670.529 l 149.93 670.649 l 150.05 670.829 l 150.11 670.949 l 150.231 671.069 l 150.351 671.25 l 150.411 671.37 l 150.531 671.49 l 150.651 671.67 l 150.771 671.79 l 150.831 671.911 l 150.952 672.031 l 151.072 672.211 l 151.192 672.331 l 151.252 672.451 l 151.372 672.571 l 151.492 672.752 l 151.552 672.872 l 151.673 672.992 l 151.793 673.112 l 151.913 673.292 l 151.973 673.413 l 152.093 673.533 l 152.333 673.773 l 152.394 673.953 l 152.514 674.073 l 152.634 674.194 l 152.694 674.314 l 152.934 674.554 l 153.054 674.734 l 153.115 674.855 l 153.355 675.095 l 153.475 675.215 l 153.535 675.335 l 153.655 675.516 l 153.775 675.636 l 153.836 675.756 l 153.956 675.876 l 154.196 676.116 l 154.256 676.236 l 154.376 676.357 l 154.496 676.477 l 154.617 676.597 l 154.677 676.777 l 154.797 676.897 l 154.917 677.018 l 154.977 677.138 l 155.217 677.378 l 155.338 677.498 l 155.398 677.618 l 155.518 677.739 l 155.638 677.859 l 155.758 677.979 l 155.818 678.099 l 156.059 678.339 l 156.119 678.459 l 156.239 678.58 l 156.359 678.7 l 156.479 678.82 l 156.539 678.94 l 156.78 679.181 l 156.9 679.301 l 156.96 679.421 l 157.08 679.541 l 157.2 679.661 l 157.26 679.781 l 157.38 679.901 l 157.621 680.142 l 157.681 680.262 l 157.801 680.382 l 157.921 680.502 l 158.041 680.562 l 158.101 680.683 l 158.342 680.923 l 158.402 681.043 l 158.762 681.404 l 158.822 681.524 l 158.943 681.644 l 159.063 681.704 l 159.183 681.824 l 159.243 681.944 l 159.363 682.064 l 159.483 682.185 l 159.543 682.305 l 159.664 682.425 l 159.784 682.485 l 159.904 682.605 l 159.964 682.725 l 160.324 683.086 l 160.385 683.146 l 160.505 683.266 l 160.625 683.386 l 160.685 683.506 l 160.805 683.627 l 160.925 683.687 l 161.045 683.807 l 161.106 683.927 l 161.226 684.047 l 161.346 684.167 l 161.466 684.227 l 161.526 684.348 l 161.646 684.468 l 161.766 684.588 l 162.608 685.429 l 162.668 685.489 l 162.908 685.729 l 162.968 685.79 l 163.208 686.03 l 163.329 686.15 l 163.389 686.21 l 163.629 686.451 l 163.749 686.511 l 163.809 686.631 l 163.929 686.751 l 164.05 686.811 l 164.11 686.931 l 164.23 687.051 l 164.35 687.111 l 164.47 687.232 l 164.53 687.352 l 164.65 687.412 l 164.771 687.532 l 164.891 687.652 l 165.071 687.832 l 165.191 687.893 l 165.251 688.013 l 165.371 688.133 l 165.492 688.193 l 165.612 688.313 l 165.792 688.493 l 165.912 688.614 l 166.032 688.674 l 166.092 688.794 l 166.213 688.854 l 166.333 688.974 l 166.393 689.094 l 166.513 689.154 l 166.633 689.274 l 166.753 689.334 l 166.813 689.455 l 166.934 689.515 l 167.054 689.635 l 167.234 689.815 l 167.354 689.935 l 167.474 689.995 l 167.534 690.116 l 167.655 690.176 l 167.775 690.296 l 167.895 690.356 l 167.955 690.476 l 168.075 690.536 l 168.195 690.656 l 168.315 690.716 l 168.376 690.837 l 168.496 690.897 l 168.616 691.017 l 168.796 691.197 l 168.916 691.257 l 169.036 691.377 l 169.097 691.437 l 169.217 691.558 l 169.337 691.618 l 169.517 691.798 l 169.637 691.918 l 169.757 691.978 l 169.818 692.098 l 169.938 692.158 l 170.058 692.218 l 170.178 692.339 l 170.238 692.399 l 170.358 692.519 l 170.478 692.579 l 170.599 692.699 l 170.779 692.879 l 170.899 692.939 l 170.959 693 l 171.079 693.12 l 171.199 693.18 l 171.32 693.3 l 171.38 693.36 l 171.5 693.42 l 171.62 693.54 l 171.74 693.6 l 171.8 693.721 l 172.041 693.841 l 172.101 693.961 l 172.221 694.021 l 172.341 694.081 l 172.521 694.261 l 172.641 694.381 l 172.882 694.502 l 172.942 694.622 l 173.062 694.682 l 173.182 694.742 l 173.242 694.862 l 173.483 694.982 l 173.603 695.102 l 173.663 695.163 l 173.783 695.223 l 173.903 695.343 l 174.023 695.403 l 174.204 695.583 l 174.324 695.643 l 174.504 695.823 l 174.624 695.883 l 174.744 695.944 l 174.804 696.004 l 174.925 696.124 l 175.045 696.184 l 175.165 696.244 l 175.225 696.364 l 175.345 696.424 l 175.465 696.484 l 175.646 696.665 l 175.886 696.785 l 176.066 696.965 l 176.186 697.025 l 176.306 697.085 l 176.487 697.265 l 176.607 697.326 l 176.667 697.386 l 176.787 697.446 l 176.907 697.566 l 177.027 697.626 l 177.088 697.686 l 177.208 697.746 l 177.328 697.866 l 177.448 697.926 l 177.508 697.986 l 177.628 698.047 l 177.748 698.107 l 177.809 698.227 l 177.929 698.287 l 178.049 698.347 l 178.169 698.407 l 178.229 698.467 l 178.349 698.587 l 178.59 698.707 l 178.65 698.767 l 178.77 698.828 l 178.89 698.948 l 178.95 699.008 l 179.07 699.068 l 179.19 699.128 l 179.311 699.188 l 179.491 699.368 l 179.611 699.428 l 179.731 699.488 l 179.791 699.549 l 179.911 699.609 l 180.032 699.669 l 180.092 699.729 l 180.212 699.849 l 180.332 699.909 l 180.452 699.969 l 180.512 700.029 l 180.632 700.089 l 180.753 700.149 l 180.873 700.209 l 180.933 700.27 l 181.053 700.39 l 181.173 700.45 l 181.233 700.51 l 181.353 700.57 l 181.474 700.63 l 181.594 700.69 l 181.654 700.75 l 181.774 700.81 l 181.894 700.87 l 182.014 700.991 l 182.074 701.051 l 182.195 701.111 l 182.315 701.171 l 182.375 701.231 l 182.495 701.291 l 182.615 701.351 l 182.735 701.411 l 182.795 701.471 l 182.916 701.531 l 183.156 701.651 l 183.336 701.832 l 183.456 701.892 l 183.516 701.952 l 183.637 702.012 l 183.757 702.072 l 183.877 702.132 l 183.937 702.192 l 184.057 702.252 l 184.298 702.372 l 184.358 702.432 l 184.598 702.553 l 184.658 702.613 l 184.778 702.673 l 184.898 702.733 l 185.018 702.793 l 185.079 702.853 l 185.199 702.913 l 185.439 703.033 l 185.499 703.093 l 185.619 703.154 l 185.739 703.214 l 185.8 703.274 l 185.92 703.334 l 186.04 703.394 l 186.16 703.454 l 186.22 703.514 l 186.46 703.634 l 186.581 703.694 l 186.641 703.754 l 186.881 703.875 l 186.941 703.935 l 187.181 704.055 l 187.302 704.115 l 187.362 704.175 l 187.482 704.235 l 187.722 704.355 l 187.782 704.415 l 188.023 704.535 l 188.083 704.596 l 188.203 704.656 l 188.323 704.656 l 188.443 704.716 l 188.503 704.776 l 188.744 704.896 l 188.864 704.956 l 188.924 705.016 l 189.164 705.136 l 189.224 705.196 l 189.465 705.317 l 189.585 705.377 l 189.645 705.377 l 189.885 705.497 l 190.005 705.557 l 190.065 705.617 l 190.306 705.737 l 190.366 705.797 l 190.486 705.857 l 190.726 705.977 l 190.786 705.977 l 190.907 706.037 l 191.027 706.098 l 191.147 706.158 l 191.207 706.218 l 191.447 706.338 l 191.507 706.398 l 191.628 706.398 l 191.748 706.458 l 191.868 706.518 l 191.928 706.578 l 192.168 706.698 l 192.289 706.758 l 192.349 706.758 l 192.469 706.819 l 192.589 706.879 l 192.649 706.939 l 192.769 706.999 l 192.889 707.059 l 193.009 707.119 l 193.07 707.119 l 193.19 707.179 l 193.31 707.239 l 193.43 707.299 l 193.49 707.359 l 193.61 707.419 l 193.73 707.419 l 193.791 707.479 l 194.031 707.6 l 194.151 707.66 l 194.211 707.72 l 194.331 707.72 l 194.451 707.78 l 194.572 707.84 l 194.632 707.9 l 194.752 707.96 l 194.872 707.96 l 194.932 708.02 l 195.052 708.08 l 195.172 708.14 l 195.293 708.201 l 195.353 708.201 l 195.473 708.261 l 195.593 708.321 l 195.713 708.381 l 195.773 708.441 l 195.893 708.441 l 196.014 708.501 l 196.074 708.561 l 196.194 708.621 l 196.314 708.681 l 196.434 708.681 l 196.494 708.741 l 196.614 708.801 l 196.735 708.861 l 196.855 708.861 l 196.915 708.922 l 197.035 708.982 l 197.155 709.042 l 197.215 709.042 l 197.335 709.102 l 197.576 709.222 l 197.636 709.282 l 197.756 709.282 l 197.996 709.402 l 198.056 709.462 l 198.177 709.462 l 198.297 709.522 l 198.357 709.582 l 198.477 709.582 l 198.717 709.703 l 198.777 709.763 l 198.898 709.763 l 199.018 709.823 l 199.138 709.883 l 199.198 709.943 l 199.318 709.943 l 199.438 710.003 l 199.498 710.063 l 199.619 710.123 l 199.739 710.123 l 199.859 710.183 l 199.919 710.243 l 200.039 710.243 l 200.28 710.363 l 200.34 710.424 l 200.46 710.424 l 200.58 710.484 l 200.64 710.544 l 200.76 710.544 l 200.88 710.604 l 201.001 710.664 l 201.061 710.664 l 201.181 710.724 l 201.301 710.784 l 201.421 710.844 l 201.481 710.844 l 201.601 710.904 l 201.721 710.964 l 201.782 710.964 l 201.902 711.024 l 202.022 711.084 l 202.142 711.084 l 202.202 711.145 l 202.322 711.205 l 202.443 711.205 l 202.563 711.265 l 202.623 711.325 l 202.743 711.325 l 202.863 711.385 l 202.923 711.445 l 203.043 711.445 l 203.163 711.505 l 203.284 711.565 l 203.344 711.565 l 203.464 711.625 l 203.584 711.685 l 203.704 711.685 l 203.764 711.745 l 203.884 711.805 l 204.005 711.805 l 204.065 711.866 l 204.185 711.926 l 204.305 711.926 l 204.425 711.986 l 204.485 712.046 l 204.605 712.046 l 204.726 712.106 l 204.846 712.106 l 204.906 712.166 l 205.026 712.226 l 205.146 712.226 l 205.206 712.286 l 205.326 712.346 l 205.447 712.346 l 205.567 712.406 l 205.627 712.466 l 205.747 712.466 l 205.867 712.526 l 205.987 712.526 l 206.047 712.587 l 206.168 712.647 l 206.288 712.647 l 206.348 712.707 l 206.468 712.767 l 206.588 712.767 l 206.708 712.827 l 206.768 712.827 l 206.889 712.887 l 207.009 712.947 l 207.129 712.947 l 207.189 713.007 l 207.309 713.007 l 207.429 713.067 l 207.489 713.127 l 207.61 713.127 l 207.73 713.187 l 207.85 713.187 l 207.91 713.247 l 208.03 713.307 l 208.15 713.307 l 208.271 713.368 l 208.331 713.368 l 208.451 713.428 l 208.571 713.488 l 208.631 713.488 l 208.751 713.548 l 208.871 713.548 l 208.992 713.608 l 209.052 713.608 l 209.172 713.668 l 209.292 713.728 l 209.412 713.728 l 209.472 713.788 l 209.592 713.788 l 209.713 713.848 l 209.773 713.848 l 209.893 713.908 l 210.013 713.968 l 210.133 713.968 l 210.193 714.029 l 210.313 714.029 l 210.434 714.089 l 210.554 714.089 l 210.614 714.149 l 210.734 714.149 l 210.854 714.209 l 210.914 714.269 l 211.034 714.269 l 211.154 714.329 l 211.275 714.329 l 211.335 714.389 l 211.455 714.389 l 211.575 714.449 l 211.695 714.449 l 211.755 714.509 l 211.875 714.569 l 211.996 714.569 l 212.056 714.629 l 212.176 714.629 l 212.296 714.689 l 212.416 714.689 l 212.476 714.75 l 212.596 714.75 l 212.717 714.81 l 212.837 714.81 l 212.897 714.87 l 213.017 714.87 l 213.137 714.93 l 213.197 714.93 l 213.317 714.99 l 213.438 714.99 l 213.558 715.05 l 213.618 715.11 l 213.738 715.11 l 213.858 715.17 l 213.978 715.17 l 214.038 715.23 l 214.159 715.23 l 214.279 715.29 l 214.339 715.29 l 214.459 715.35 l 214.579 715.35 l 214.699 715.41 l 214.759 715.41 l 214.88 715.471 l 215 715.471 l 215.12 715.531 l 215.18 715.531 l 215.3 715.591 l 215.42 715.591 l 215.48 715.651 l 215.601 715.651 l 215.721 715.711 l 215.841 715.711 l 215.901 715.771 l 216.021 715.771 l 216.141 715.831 l 216.262 715.831 l 216.322 715.891 l 216.442 715.891 l 216.562 715.951 l 216.622 715.951 l 216.742 716.011 l 216.983 716.011 l 217.043 716.071 l 217.163 716.071 l 217.283 716.131 l 217.403 716.131 l 217.463 716.191 l 217.583 716.191 l 217.704 716.252 l 217.764 716.252 l 217.884 716.312 l 218.004 716.312 l 218.124 716.372 l 218.184 716.372 l 218.304 716.432 l 218.424 716.432 l 218.545 716.492 l 218.725 716.492 l 218.845 716.552 l 218.905 716.552 l 219.025 716.612 l 219.146 716.612 l 219.266 716.672 l 219.326 716.672 l 219.446 716.732 l 219.566 716.732 l 219.686 716.792 l 219.866 716.792 l 219.987 716.852 l 220.047 716.852 l 220.167 716.912 l 220.287 716.912 l 220.407 716.973 l 220.467 716.973 l 220.587 717.033 l 220.828 717.033 l 220.888 717.093 l 221.008 717.093 l 221.128 717.153 l 221.248 717.153 l 221.308 717.213 l 221.549 717.213 l 221.609 717.273 l 221.729 717.273 l 221.849 717.333 l 221.969 717.333 l 222.029 717.393 l 222.27 717.393 l 222.39 717.453 l 222.45 717.453 l 222.57 717.513 l 222.69 717.513 l 222.75 717.573 l 222.991 717.573 l 223.111 717.633 l 223.171 717.633 l 223.291 717.694 l 223.532 717.694 l 223.592 717.754 l 223.712 717.754 l 223.832 717.814 l 223.892 717.814 l 224.012 717.874 l 224.253 717.874 l 224.313 717.934 l 224.433 717.934 l 224.553 717.994 l 224.733 717.994 l 224.853 718.054 l 224.974 718.054 l 225.034 718.114 l 225.274 718.114 l 225.394 718.174 l 225.454 718.174 l 225.574 718.234 l 225.815 718.234 l 225.875 718.294 l 226.115 718.294 l 226.175 718.354 l 226.295 718.354 l 226.416 718.415 l 226.596 718.415 l 226.716 718.475 l 226.836 718.475 l 226.956 718.535 l 227.137 718.535 l 227.257 718.595 l 227.437 718.595 l 227.557 718.655 l 227.677 718.655 l 227.737 718.715 l 227.978 718.715 l 228.098 718.775 l 228.278 718.775 l 228.398 718.835 l 228.578 718.835 l 228.699 718.895 l 228.819 718.895 l 228.879 718.955 l 229.119 718.955 l 229.239 719.015 l 229.42 719.015 l 229.54 719.075 l 229.72 719.075 l 229.84 719.136 l 229.96 719.136 l 230.02 719.196 l 230.261 719.196 l 230.381 719.256 l 230.561 719.256 l 230.681 719.316 l 230.862 719.316 l 230.982 719.376 l 231.162 719.376 l 231.282 719.436 l S 231.282 719.436 m 231.523 719.436 l 231.583 719.496 l 231.823 719.496 l 231.883 719.556 l 232.123 719.556 l 232.244 719.616 l 232.424 719.616 l 232.544 719.676 l 232.724 719.676 l 232.844 719.736 l 233.025 719.736 l 233.145 719.796 l 233.385 719.796 l 233.445 719.857 l 233.686 719.857 l 233.806 719.917 l 233.986 719.917 l 234.106 719.977 l 234.286 719.977 l 234.407 720.037 l 234.587 720.037 l 234.707 720.097 l 234.947 720.097 l 235.007 720.157 l 235.308 720.157 l 235.428 720.217 l 235.668 720.217 l 235.728 720.277 l 235.969 720.277 l 236.089 720.337 l 236.269 720.337 l 236.389 720.397 l 236.69 720.397 l 236.81 720.457 l 236.99 720.457 l 237.11 720.517 l 237.29 720.517 l 237.411 720.578 l 237.711 720.578 l 237.831 720.638 l 238.011 720.638 l 238.132 720.698 l 238.432 720.698 l 238.552 720.758 l 238.732 720.758 l 238.853 720.818 l 239.153 720.818 l 239.273 720.878 l 239.514 720.878 l 239.574 720.938 l 239.874 720.938 l 239.994 720.998 l 240.235 720.998 l 240.295 721.058 l 240.655 721.058 l 240.715 721.118 l 241.016 721.118 l 241.136 721.178 l 241.376 721.178 l 241.436 721.238 l 241.797 721.238 l 241.857 721.299 l 242.157 721.299 l 242.277 721.359 l 242.578 721.359 l 242.698 721.419 l 242.938 721.419 l 242.998 721.479 l 243.299 721.479 l 243.419 721.539 l 243.719 721.539 l 243.84 721.599 l 244.14 721.599 l 244.26 721.659 l 244.561 721.659 l 244.681 721.719 l 244.981 721.719 l 245.101 721.779 l 245.402 721.779 l 245.522 721.839 l 245.822 721.839 l 245.942 721.899 l 246.243 721.899 l 246.363 721.959 l 246.723 721.959 l 246.844 722.02 l 247.144 722.02 l 247.264 722.08 l 247.565 722.08 l 247.685 722.14 l 247.985 722.14 l 248.105 722.2 l 248.526 722.2 l 248.646 722.26 l 248.947 722.26 l 249.007 722.32 l 249.427 722.32 l 249.547 722.38 l 249.848 722.38 l 249.968 722.44 l 250.389 722.44 l 250.509 722.5 l 250.809 722.5 l 250.929 722.56 l 251.29 722.56 l 251.41 722.62 l 251.831 722.62 l 251.951 722.68 l 252.251 722.68 l 252.371 722.74 l 252.792 722.74 l 252.852 722.801 l 253.273 722.801 l 253.393 722.861 l 253.813 722.861 l 253.933 722.921 l 254.354 722.921 l 254.414 722.981 l 254.835 722.981 l 254.955 723.041 l 255.375 723.041 l 255.496 723.101 l 255.856 723.101 l 255.976 723.161 l 256.517 723.161 l 256.637 723.221 l 256.998 723.221 l 257.118 723.281 l 257.538 723.281 l 257.659 723.341 l 258.139 723.341 l 258.259 723.401 l 258.68 723.401 l 258.8 723.461 l 259.281 723.461 l 259.401 723.522 l 259.942 723.522 l 260.062 723.582 l 260.422 723.582 l 260.543 723.642 l 261.083 723.642 l 261.203 723.702 l 261.684 723.702 l 261.804 723.762 l 262.345 723.762 l 262.405 723.822 l 262.946 723.822 l 263.066 723.882 l 263.547 723.882 l 263.667 723.942 l 264.268 723.942 l 264.388 724.002 l 264.929 724.002 l 264.989 724.062 l 265.65 724.062 l 265.77 724.122 l 266.25 724.122 l 266.371 724.182 l 266.971 724.182 l 267.092 724.243 l 267.692 724.243 l 267.813 724.303 l 268.413 724.303 l 268.534 724.363 l 269.194 724.363 l 269.255 724.423 l 269.915 724.423 l 269.976 724.483 l 270.636 724.483 l 270.697 724.543 l 271.478 724.543 l 271.538 724.603 l 272.199 724.603 l 272.259 724.663 l 272.98 724.663 l 273.1 724.723 l 273.821 724.723 l 273.941 724.783 l 274.662 724.783 l 274.782 724.843 l 275.503 724.843 l 275.623 724.904 l 276.404 724.904 l 276.525 724.964 l 277.246 724.964 l 277.366 725.024 l 278.207 725.024 l 278.327 725.084 l 279.108 725.084 l 279.228 725.144 l 280.069 725.144 l 280.19 725.204 l 280.971 725.204 l 281.091 725.264 l 282.052 725.264 l 282.112 725.324 l 282.953 725.324 l 283.074 725.384 l 283.254 725.384 l S [0.901 2.704 ]2.704 d 127.7 631.415 m 127.7 631.415 l 129.262 634.96 l 130.824 638.565 l 132.446 642.109 l 134.008 645.654 l 135.57 649.259 l 137.133 652.804 l 138.695 656.409 l 140.257 659.954 l 141.879 663.499 l 143.441 667.104 l 146.566 674.194 l 148.128 677.799 l 149.69 681.344 l 151.312 684.948 l 154.436 692.038 l 155.999 695.643 l 159.123 702.733 l 160.745 706.338 l 162.307 709.883 l 163.869 713.488 l 166.994 720.578 l 168.556 724.182 l 170.178 727.727 l 170.238 727.848 l S BT /TT2 1 Tf 6.3087 0 0 6.3087 147.9933 714.8096 Tm 0 g 0 Tc 0 Tw (> 2^41)Tj 9.0124 0 0 9.0124 105.2286 651.2421 Tm (1000)Tj 0 2.6133 TD (2000)Tj T* (3000)Tj 0 2.6067 TD (4000)Tj 2.2433 -11.2733 TD [(0)-3356.7(4000)-2606.7(8000)-2356.7(12000)]TJ 0 9.0124 -9.0124 0 93.5725 630.453 Tm (Number of different salts)Tj 9.0124 0 0 9.0124 147.4431 612.7891 Tm (Number of password file entries)Tj 6.3087 0 0 6.3087 252.2511 714.8096 Tm (2^12)Tj 9.0124 0 0 9.0124 118.7472 627.6896 Tm (0)Tj /T6 1 Tf 0.12 0 0 -0.12 72 587.9401 Tm (Figure)Tj 276.0001 0 TD -0.0001 Tc ()Tj 128.9999 0 TD 0 Tc (Distribution)Tj 483 0 TD 0.0001 Tc (of)Tj 108.9999 0 TD 0 Tc [(exp)-2000.1(ected)]TJ 359.0001 0 TD (dieren)Tj 268.0001 0 TD (t)Tj 74 0 TD (salts)Tj -1698.0001 100 TD [(dep)-2000(ending)-30999.9(o)-0.1(n)-30999.9(t)-0.1(he)-31000(salt)-30000(space)-30000(a)0(gainst)-29999.9(the)-31000(n)]TJ 1532.0001 0 TD -0.0002 Tc (um)Tj 112.9998 0 TD 2.0002 Tc [(be)2000.2(r)-27999.8(o)2000.2(f)]TJ -1644.9999 99 TD 0 Tc (en)Tj 81 0 TD [(tries)-27000.1(i)0.1(n)-28000.1(a)-26999.9(passw)]TJ 563.0001 0 TD [(ord)-25999.9(le )]TJ /T7 1 Tf -644.0001 266.0005 TD (crypt)Tj /T6 1 Tf 183 0 TD ()Tj 62.0001 0 TD (the)Tj 150.9999 0 TD (result)Tj 240 0 TD 0.0001 Tc (of)Tj 102 0 TD 0 Tc (hashing)Tj 314 0 TD (ev)Tj 79.0001 0 TD -0.0001 Tc (ery)Tj 147.9999 0 TD 0 Tc (dictionary)Tj 403.0001 0 TD (w)Tj 57.9998 0 TD (ord)Tj -1739.9999 99 TD [(under)-23000.1(e)0(v)]TJ 310.0001 0 TD [(ery)-22000(p)-2000.1(ossible)-22999.9(bit)-22000(salt)-22999.9(w)]TJ 889.9999 0 TD [(ould)-21999.9()0(t)-24000(o)0.2(n)-23000.2(a)-23000(single)]TJ -1200 100 TD [(\012)-26999.9(G)-0.1(B)-28000(h)-0.1(ard)-27000(disk )]TJ 0 198.9998 TD [(One)-22000.1(can)-21000.1(d)0.1(o)-22000(b)-2000(etter)-23000(h)0(o)]TJ 777 0 TD (w)Tj 58 0 TD (ev)Tj 79 0 TD [(er)-20999.9(b)]TJ 158 0 TD [(y)-22000(s)0(toring)-19999.9(less)-22000.2(than)-22000(the)]TJ -1072 100 TD [(full)-25999.9(o)-0.1(utput)-26000.1(o)0.1(f)]TJ /T7 1 Tf 505 0 TD (crypt)Tj /T6 1 Tf 216 0 TD [(in)-26000(a)-25000(database )]TJ 539 0 TD [(The)-26000(QCrac)]TJ 403.9999 0 TD 23.0002 Tc [(k )23000.2()23000.4()]TJ 173.0002 0 TD 0 Tc ()Tj -1837.0001 99.0002 TD (passw)Tj 212 0 TD (ord)Tj 157.0001 0 TD (crac)Tj 147.0001 0 TD (king)Tj 191.9999 0 TD (program)Tj 344 0 TD (tak)Tj 116.0001 0 TD (es)Tj 106.9999 0 TD (exactly)Tj 297.0001 0 TD (this)Tj 172.9998 0 TD (ap)Tj -1744.9999 100 TD (proac)Tj 198.0001 0 TD [(h )-31999.9(QCrac)]TJ 335.9999 0 TD [(k)-17000(precomputes)-19000(a)-18000(d)0.1(atabase)-17999.8(of)-19000(common)]TJ -534 100 TD (passw)Tj 212 0 TD (ords)Tj 192.0001 0 TD (hashed)Tj 290.0001 0 TD (under)Tj 249 0 TD (ev)Tj 78.9999 0 TD (ery)Tj 153 0 TD (salt )Tj 228 0 TD (Rather)Tj 291.0001 0 TD -0.0001 Tc (than)Tj -1694.0001 99 TD 0 Tc [(store)-22000(the)-23000(full)-24000()-22000(c)]TJ 619.0001 0 TD [(haracter)-21000(output)-23000(of)]TJ /T7 1 Tf 680 0 TD (crypt)Tj /T6 1 Tf 183 0 TD [()-25000(i)0.2(t)-23000(f)0(urther)]TJ -1482.0001 100 TD (hashes)Tj /T7 1 Tf 263.0001 0 TD (crypt)Tj /T6 1 Tf 190.9999 0 TD [(s)-28000(output)-27999.9(d)-0.1(o)]TJ 442 0 TD [(wn)-25999.8(to)-27000(a)-27000(s)-0.1(ingle)-27000(b)]TJ 576.9999 0 TD 0.0001 Tc (yte )Tj 173 0 TD 0 Tc (When)Tj -1645.9999 100 TD (crac)Tj 146.9999 0 TD 0.0001 Tc (king)Tj 193.0001 0 TD 0 Tc (a)Tj 82.0001 0 TD (passw)Tj 211.9999 0 TD (ord)Tj 159 0 TD (from)Tj 208 0 TD (the)Tj 156 0 TD (dictionary)Tj 361.0001 0 TD ()Tj 64.9998 0 TD (QCrac)Tj 235.0002 0 TD (k)Tj -1818.0001 99 TD [(uses)-27999.9(the)-29000(database)-27000(to)-27999.9(rule)-29000(out)-28000()0.1()-27000(of)-29000(ev)]TJ 1414 0 TD [(ery)-27000()-27000(c)0(an)]TJ -1414 100 TD [(didate)-25999.9(p)-0.1(assw)]TJ 464 0 TD [(ords)-25000(without)-26000.1(needing)-25999.9(to)-27000(compute)-26000(their)]TJ -464 99 TD (hashes )Tj 333 0 TD (A)Tj 102 0 TD (QCrac)Tj 235 0 TD (k)Tj 82 0 TD (database)Tj 359.0001 0 TD -0.0002 Tc (of)Tj 107 0 TD -0.0001 Tc (the)Tj 154.9999 0 TD 0 Tc (W)Tj 78.0001 0 TD (ebster)Tj 257.9998 0 TD (Dic)Tj -1708.9999 100 TD [(tionary)-24000(c)-0.1(onsumes)-24000.1(only)-24000(\015)-23000.1(MB )-25000(QCrac)]TJ 1399.0001 0 TD [(k)-23000(c)0(ould)-24000(store)]TJ -1399.0001 100 TD [(hashes)-20000(of)-21000.1(appro)]TJ 552 0 TD [(ximately)-18999.9()]TJ /T8 1 Tf 375 0 TD ( )Tj /T6 1 Tf 37 0 TD ()Tj /T8 1 Tf 126 0 TD ( )Tj /T6 1 Tf 37 0 TD 0.0001 Tc [()-17999.8(w)]TJ 202 0 TD 0 Tc [(ords)-18999.8(on)-21000(a)-20000(\012)-21000(GB)]TJ -1329 98.9998 TD [(hard)-27000.1(disk )]TJ /T7 1 Tf 0 200 TD (Bcrypt)Tj /T6 1 Tf 279.0001 0 TD [(has)-28000(a)-29000(large)-27000.1(e)0.1(nough)-29000(s)-0.1(alt)-28000.1(space)-28000(to)-29000.1(mak)]TJ 1348.9998 0 TD 28.0002 Tc [(es)28000.4(t)28000.2(o)28000(r)28000.4()]TJ -1627.9999 99 TD 0 Tc [(ing)-29000.1(e)0(v)]TJ 219.0001 0 TD [(en)-29000(one)-28999.9(bit)-30000(of)-29000(information)-29000(p)-2000.1(er)-29000(salt)-29000(completely)]TJ -219.0001 100 TD 0.0001 Tc (in)Tj 67.0001 0 TD 0 Tc (tractable )Tj 392.9999 0 TD (Moreo)Tj 228 0 TD (v)Tj 42 0 TD [(er)-30000(t)0.1(he)-31000(algorithm)-30000(m)0(ak)]TJ 803.9999 0 TD [(es)-30000(imme)]TJ -1533.9999 99 TD [(diate)-24000.1(u)0.1(se)-23000(of)-22999.9(the)-24000.1(passw)]TJ 784.0001 0 TD [(ord)-21999.9(and)-23000(salt)-23000.1(from)-24000(the)-24000.2(v)]TJ 827 0 TD [(ery)-22000(b)-1999.8(e)0()]TJ -1611.0001 100 TD (ginning )Tj 335.0001 0 TD (Th)Tj 103.9999 0 TD [(us)-31000.1(b)-1999.9(efore)-30000(kno)]TJ 515 0 TD [(wing)-29000(a)-30000(target)-28999.8(p)-0.2(assw)]TJ 731.0001 0 TD (ords)Tj -1685.0001 100.0002 TD [(salt)-31000(t)-0.1(here)-31000(is)-29999.9(not)-31000(ev)]TJ 716 0 TD [(en)-29999.9(an)-31000(in)]TJ 299 0 TD [(termediary)-29000(state)-31000(of)-31000(the)]TJ -1015 98.9999 TD [(algorithm)-25999.9(that)-28000(can)-28000(b)-2000.1(e)-27999.9(usefully)-26999.9(precomputed )]TJ /T17 1 Tf 0 316.0001 TD ( )Tj 292.0001 0 TD [(Algorithm)-29000.1(Optimization)]TJ /T6 1 Tf -292.0001 253 TD [(Since)-31000.1(a)-30999.9(guessing)-28999.9(attac)]TJ 807 0 TD [(k)-30000.1(o)0.1(n)-31000.1(a)-30999.9(passw)]TJ 478 0 TD [(ord)-29000(function)-31000(in)]TJ -1285 98.9999 TD (v)Tj 42.0001 0 TD (olv)Tj 106.9999 0 TD [(es)-29000.1(rep)-2000.1(e)0.1(ated)-29000(ev)]TJ 516 0 TD [(aluation)-30000(o)0(f)-30000(the)-31000(function)-31000(an)]TJ 1005.9999 0 TD 30 Tc [(yo)29999.8(p)30000.2()]TJ -1670.9999 100 TD 0 Tc (timization)Tj 407.0001 0 TD -0.0001 Tc (of)Tj 103.9999 0 TD 0 Tc (the)Tj 153 0 TD (function)Tj 335.0001 0 TD (will)Tj 166.9999 0 TD (reduce)Tj 273 0 TD -0.0001 Tc (the)Tj 153.0001 0 TD (compu)Tj -1592.0001 99 TD 0 Tc [(tational)-30000(cost)-30000(of)-29999.9(an)-29999.9(attac)]TJ 884 0 TD [(k)-31000(making)-29999.9(the)-30000(attac)]TJ 722.0001 0 TD [(k)-30000(more)]TJ -1606.0001 100 TD (practical )Tj 0 199.0001 TD [(Biham)-31000(r)0.1(ecen)]TJ 458 0 TD [(tly)-30000(disco)]TJ 308 0 TD (v)Tj 42 0 TD [(ered)-28000(a)-31000.1(n)0.1(otable)-29999.9(s)-0.1(oft)]TJ 682.0001 0 TD (w)Tj 58 0 TD [(are)-28999.8(o)-0.2(pti)]TJ 462 -5254 TD [(mization)-31000.2(of)-32000(DES)-31999.8(whic)]TJ 806 0 TD [(h)-31999.8(h)0(e)-31000.2(called)]TJ /T7 1 Tf 432 0 TD (bitslicing)Tj /T6 1 Tf 359 0 TD ( )Tj 160 0 TD (By)Tj -1757 100 TD (replacing)Tj 363 0 TD (DESs)Tj 258 0 TD -0.0001 Tc (SBo)Tj 173 0 TD 0 Tc (xes)Tj 147.9998 0 TD 0.0001 Tc (with)Tj 197.0002 0 TD 0 Tc (a)Tj 76.9998 0 TD (logic)Tj 202 0 TD 0.0001 Tc (gate)Tj 188.0002 0 TD (circuit)Tj -1606 99 TD 0 Tc [(one)-21000(can)-21999.8(reduced)-21000.2(DES)-22000(t)0(o)-21000(a)-21000(s)-0.2(et)-21999.8(of)-21999.8(bit)-21999.8(o)-0.2(p)-1999.8(e)0(rations )]TJ 1712 0 TD (One)Tj -1712 100 TD [(can)-25000.2(t)0(hen)-26000(treat)-26000(a)-25000()0(bit)-25000(p)0.2(ro)-1999.8(cessor)-22999.8(as)-26000()-24000(parallel)-25000(one)]TJ T* [(bit)-27999.8(pro)-2000(cessors)-25000(e)0.2(ac)]TJ 662 0 TD [(h)-26999.8(i)-0.2(mplemen)]TJ 421 0 TD [(ting)-28000(the)-28000(circuit )]TJ -1083 199 TD [(On)-27000(a)-26000()0.2(MHz)-26000(Alpha)-28000()0()-25000(pro)-1999.8(cessor)-25000(B)0.2(iham)-27000(gained)]TJ 0 99 TD [(ab)-2000.2(out)-22000.2(a)-22000(factor)-20999.8(of)-21999.8()-22000.2(s)0(p)-2000(eedup)-22000(u)0(sing)-22000(bitsliced)-23000(DES )-21999.5(His)]TJ 0 100 TD (implemen)Tj 347.9998 0 TD [(tation)-31999.8(encrypted)]TJ 639.0002 0 TD -0.0001 Tc [(\015)-31000.3(M)-0.1(bsec)]TJ 460 0 TD 0 Tc [(on)-32000(a)]TJ 160 0 TD (v)Tj 42 0 TD (erage)Tj -1649 100 TD (compared)Tj 391.9998 0 TD 0.0002 Tc (to)Tj 115.0002 0 TD 0.0001 Tc (Eric)Tj 189.9998 0 TD 0 Tc (Y)Tj 55.0002 0 TD (oungs)Tj 272 0 TD [(lib)-1999.8(des)]TJ 277.9998 0 TD 0.0001 Tc (whic)Tj 164 0 TD 0 Tc (h)Tj 87.0002 0 TD (ac)Tj 76.9995 0 TD 0.0001 Tc (hiev)Tj 148.0005 0 TD 0 Tc (ed)Tj -1778 99 TD [(only)-27000.2()-26999.8(Mbsec )]TJ 0 200 TD (F)Tj 46.9998 0 TD 0.0002 Tc (or)Tj 110.0002 0 TD 0 Tc (MD)Tj /T7 1 Tf 217 0 TD -0.0001 Tc (crypt)Tj /T6 1 Tf 228 0 TD (the)Tj 150.9998 0 TD 0 Tc (situation)Tj 355.0002 0 TD -0.0002 Tc (is)Tj 92 0 TD 0 Tc (similar )Tj 329.9995 0 TD 0.0005 Tc (In)Tj 112.0005 0 TD 0.0001 Tc (John)Tj -1642 99 TD -0.0001 Tc (the)Tj 152.9998 0 TD 0 Tc [(Ripp)-2000(er)]TJ 327 0 TD 0.0001 Tc ( )Tj 125 0 TD 0 Tc (a)Tj 80 0 TD (considerable)Tj 481 0 TD 0.0001 Tc [(sp)-1999.9(eedup)]TJ 331.0002 0 TD 0 Tc (w)Tj 57.9995 0 TD 0.0005 Tc (as)Tj 111.0005 0 TD 0 Tc (made)Tj -1666 100 TD (b)Tj 44 0 TD [(y)-22999.8(s)-0.2(implifying)-23000.2(MD)]TJ /T7 1 Tf 692 0 TD -0.0001 Tc (crypt)Tj /T6 1 Tf 191 0 TD [(s)-23000.1(cen)]TJ 197 0 TD [(tral)-22000.1(computing)-23000.1(lo)-2000.6(op )]TJ -1124 198.9995 TD 0 Tc [(Bitslicing)-29000(r)0.2(elies)-29000(o)-0.2(n)-29000(t)0.2(he)-29000.2(fact)-30000(that)-28999.8(DESs)-30000(Sb)-2000(o)]TJ 1607 0 TD [(xes)-28000(are)]TJ -1607 100 TD [(xed)-23999.8(and)-24000(w)]TJ 413 0 TD -0.0002 Tc [(ell)-24000.4(k)-0.2(no)]TJ 237 0 TD 0 Tc (wn )Tj 164 0 TD [(In)-24000(con)]TJ 223 0 TD (trast)Tj /T7 1 Tf 217.9998 0 TD (Bcrypt)Tj /T6 1 Tf 249.0002 0 TD [(s)-25000(Sb)-2000(o)]TJ 243 0 TD (xes)Tj -1747 99 TD (c)Tj 34.9998 0 TD [(hange)-26000.2(c)0.2(onstan)]TJ 515.0002 0 TD -0.0001 Tc [(tly)-26000.3(o)]TJ 164.9998 0 TD 0 Tc (v)Tj 42.0002 0 TD [(er)-25999.8(the)-27000(course)-26000(of)-28000.2(the)-27000(algorithm)]TJ -757 100.0005 TD (and)Tj 166.9998 0 TD (tak)Tj 116.0002 0 TD 0.0001 Tc [(e)-31999.9(o)0.1(n)-31999.7(dieren)]TJ 456.9998 0 TD 0 Tc (t)Tj 65 0 TD (v)Tj 39.0002 0 TD (alues)Tj 214 0 TD [(for)-31999.8(ev)]TJ 211 0 TD [(ery)-31999.8(com)]TJ 292 0 TD (bination)Tj -1561 100 TD -0.0001 Tc [(of)-32000.1(passw)]TJ 310.9998 0 TD 0 Tc [(ord)-30000.2(and)-31999.8(s)-0.2(alt )]TJ 519 0 TD [(Bitslicing)-32000(c)0(annot)-32000(b)-2000(e)-32000(applied)]TJ -829.9998 98.9998 TD (to)Tj /T7 1 Tf 101 0 TD (b)Tj 33.9998 0 TD 0.0001 Tc (crypt)Tj /T6 1 Tf 183 0 TD 0 Tc ( )Tj /T17 1 Tf -317.9998 316 TD ( )Tj 291.9998 0 TD (Hardw)Tj 279.0002 0 TD (are)Tj 162 0 TD (Impro)Tj 254 0 TD (v)Tj 46.9998 0 TD (emen)Tj 219 0 TD (ts)Tj /T6 1 Tf -1252.9998 252 TD [(In)-25000.2(\012\015\015)-21999.8(on)-24999.8(a)-24000.2(V)]TJ 522.9998 0 TD (AX\015)Tj /T7 1 Tf 449 0 TD (crypt)Tj /T6 1 Tf 216.0002 0 TD [(could)-24000(b)-1999.8(e)-25000(e)0(v)]TJ 404 0 TD (aluated)Tj -1592 100 TD -0.0002 Tc [(ab)-2000.4(out)]TJ 246 0 TD 0 Tc ()Tj /T8 1 Tf 42 0 TD ()Tj /T6 1 Tf 22.9998 0 TD ()Tj 78.0002 0 TD (times)Tj 231 0 TD 1.9998 Tc [(pe)1999.8(r)]TJ 154 0 TD 0 Tc (second )Tj 327 0 TD -0.0002 Tc (In)Tj 113 0 TD -0.0001 Tc (the)Tj 151.9998 0 TD 0.0001 Tc (last)Tj 166.0002 0 TD 0 Tc ()Tj 120 0 TD (y)Tj 41.9995 0 TD 0.0001 Tc (ears)Tj -1693.9995 100.0002 TD -0.0001 Tc (mac)Tj 146 0 TD (hine)Tj 186 0 TD 0 Tc [(sp)-2000(eed)]TJ 234.9998 0 TD (has)Tj 154.0002 0 TD (increased)Tj 367 0 TD (dramatically)Tj 489 0 TD (and)Tj 167.9995 0 TD 0.0003 Tc (the)Tj -1744.9995 98.9998 TD 0 Tc [(algorithm)-25999.8(h)-0.2(as)-27000.2(b)-2000(een)-29000(optimized)-26999.8(in)-28000(v)]TJ 1240.9998 0 TD [(arious)-27000.2(w)]TJ 304.0002 0 TD (a)Tj 40 0 TD (ys )Tj -1585 200 TD (The)Tj 188 0 TD (Electronic)Tj 411 0 TD (F)Tj 47 0 TD (ron)Tj 118.9998 0 TD 0.0001 Tc (tier)Tj 169 0 TD 0 Tc (F)Tj 47.0002 0 TD (oundation)Tj 409.9998 0 TD (built)Tj 216.0002 0 TD (a)Tj 86.9995 0 TD 0.0003 Tc (DES)Tj -1693.9995 99 TD 0 Tc (crac)Tj 146.9998 0 TD (k)Tj 42.0002 0 TD [(er)-19999.8(in)-23000(\012\012)-20000(and)-22000(w)]TJ 584 0 TD [(as)-22000.2(able)-21999.8(to)-22000(crac)]TJ 510 0 TD -0.0001 Tc [(k)-21000.1(a)-22000.1(bit)-21000.6(k)]TJ 405 0 TD 0 Tc [(ey)-22000(in)]TJ -1688 100 TD [()-19000(hours)-18999.8(w)-0.2(ith)-20999.8(a)-0.2(n)-20000(a)]TJ 652 0 TD (v)Tj 42 0 TD [(erage)-17000(searc)]TJ 388 0 TD -0.0001 Tc [(h)-17999.9(rate)-20000.3(of)-20000.3(ab)-2000.1(out)-20000.1()]TJ /T12 1 Tf 632 0 TD 0 Tc ()Tj /T6 1 Tf 26 0 TD ()Tj /T11 1 Tf 84 -30 TD (\012)Tj /T6 1 Tf -1824 129 TD (k)Tj 41.9998 0 TD (eys)Tj 149 0 TD 2.0002 Tc [(pe)2000.2(r)]TJ 155.0002 0 TD -0.0001 Tc (second)Tj 277 0 TD 0 Tc ( )Tj 64 0 TD -0.0002 Tc ( )Tj 109.9998 0 TD 0.0001 Tc (While)Tj 251.0002 0 TD 0 Tc (the)Tj 152 0 TD (EFF)Tj 201 0 TD (DES)Tj 203 0 TD (crac)Tj 147 0 TD (k)Tj 41.9995 0 TD (er)Tj -1792.9995 100 TD [(cannot)-21999.8(b)-2000.2(e)-22000(used)-22999.8(for)-20999.8(p)-0.2(assw)]TJ 891.9998 0 TD [(ord)-21000(guessing)-22000(a)-22000(comparable)]TJ -891.9998 100 TD -0.0001 Tc (mac)Tj 146 0 TD [(hine)-21000.3(could)-21000.1(c)-0.3(rac)]TJ 535 0 TD 0 Tc [(k)-20000(t)0(raditional)]TJ /T7 1 Tf 468 0 TD -0.0001 Tc (crypt)Tj /T6 1 Tf 213 0 TD 0 Tc (b)Tj 44 0 TD [(y)-20999.8(brute)-22000(force)]TJ -1406 99.0002 TD [(in)-26000.2()-24999.8(da)]TJ 290 0 TD [(ys)-25000.2(compared)-24999.8(to)-25999.8(\015)-23999.8(y)]TJ 793.9998 0 TD 0.0001 Tc [(ears)-23999.9(on)-25999.7(the)-25999.9(fastest)-25999.4(al)]TJ -1083.9998 100 TD -0.0001 Tc [(pha)-27000.1(p)-0.3(ro)-2000.1(cessor)-26000.3(t)-0.1(o)-27000.1(whic)]TJ 789.9998 0 TD 28.0002 Tc (hw)Tj 132 0 TD 0 Tc [(e)-27000.2(had)-28000(access )]TJ -921.9998 198.9999 TD [(The)-22000(impact)-20999.8(o)-0.2(f)-20999.8(i)-0.2(ncreasing)-20000(p)-0.2(ro)-2000(cessor)-20000(sp)-2000.2(eed)-21000.2(and)-22000(b)-2000(etter)]TJ 0 100 TD (optimization)Tj 490.9998 0 TD 0.0002 Tc (of)Tj 101 0 TD 0.0001 Tc (the)Tj 150 0 TD 0 Tc (passw)Tj 212 0 TD (ord)Tj 153.0002 0 TD (hashing)Tj 312 0 TD (algorithm)Tj 385 0 TD (is)Tj -1804 99.0001 TD -0.0001 Tc (sho)Tj 119 0 TD [(wn)-27000.3(in)-28000.1(Figure)-27000.3( )]TJ -119 200 TD 0 Tc (Both)Tj 224 0 TD (traditional)Tj 428.9998 0 TD (and)Tj 179.0002 0 TD -0.0001 Tc (MD)Tj /T7 1 Tf 226.9998 0 TD 0 Tc (crypt)Tj /T6 1 Tf 237 0 TD [(op)-2000(erate)]TJ 315.0002 0 TD 0.0001 Tc (with)Tj 206.9995 0 TD 0 Tc (a)Tj -1817.9995 98.9999 TD [(xed)-19999.8(n)]TJ 237 0 TD (um)Tj 113 0 TD [(b)-1999.8(e)0(r)-20000.2(o)0.2(f)-20000.2(rounds )]TJ 527 0 TD [(On)-20000.2(a)-19000(m)0(o)-2000(d)0.2(ern)-20000(Alpha)-20000(pro)-2000(ces)]TJ -877 100 TD [(sor)-26000(traditional)]TJ /T7 1 Tf 567.9998 0 TD 0.0001 Tc (crypt)Tj /T6 1 Tf 219.0002 0 TD 0 Tc [(can)-27000.2(a)0(lready)-26000(b)-1999.8(e)-28000.2(computed)-28000(fast)]TJ -787 100 TD (enough)Tj 297.9998 0 TD (to)Tj 114.0002 0 TD (render)Tj 270 0 TD -0.0002 Tc (it)Tj 95 0 TD 0 Tc (un)Tj 89.9998 0 TD 0.0001 Tc (usable)Tj 267 0 TD (with)Tj 201.0002 0 TD 0 Tc (readable)Tj 344 0 TD (pass)Tj -1679 99 TD (w)Tj 58 0 TD [(ord)-30000(les )]TJ 362 0 TD [(When)-31999.8(using)-31000(s)0(p)-2000(e)0.2(cialized)-31000(DES)-32000(hardw)]TJ 1307 0 TD (are)Tj -1727 100.0001 TD [(the)-23000.2(c)0(omputing)-23000.2(time)-23000(c)0(an)-22000(b)-2000(e)-23000(reduced)-23000(again)-21000(b)]TJ 1548 0 TD [(y)-23000(sev)]TJ 179 0 TD (eral)Tj -1727 100 TD [(orders)-26000.2(o)0.2(f)-28000.2(magnitude )]TJ 0 198.9998 TD (Neither)Tj 302.9998 0 TD 0.0001 Tc [(traditional)-31999.9(n)0.3(or)-30999.7(MD)]TJ /T7 1 Tf 782.0002 0 TD -0.0001 Tc (crypt)Tj /T6 1 Tf 224 0 TD 0 Tc [(supp)-2000(ort)]TJ 313 0 TD 31.9995 Tc (av)Tj 113 0 TD 0 Tc (ari)Tj ET endstream endobj 53 0 obj << /ProcSet [/PDF /Text ] /Font << /TT2 37 0 R /T6 9 0 R /T7 10 0 R /T8 19 0 R /T11 25 0 R /T12 26 0 R /T17 39 0 R >> /ExtGState << /GS1 11 0 R >> >> endobj 55 0 obj << /Length 15739 >> stream BT /TT2 1 Tf 8.9492 0 0 8.9492 425.1425 635.1818 Tm 0 0 0 rg /GS1 gs 0 Tc 0 Tw (* estimated)Tj ET 0.9 g 0 0 0 RG 0 J 0 j 0.373 w 10 M []0 d 1 i 130.565 657.555 m 138.023 657.555 l B* 130.565 687.385 m 138.023 687.385 l B* 130.565 597.894 m 138.023 597.894 l B* q 0 792.06 612 -792 re 426.634 569.554 m 432.6 568.063 l 426.634 566.571 l 433.346 566.571 l 433.346 569.554 l W n 193.955 568.063 m 432.6 568.063 l S Q 426.634 569.554 m 432.6 568.063 l 426.634 566.571 l S 205.142 661.284 7.458 -93.221 re B* 0.25 g 234.972 586.707 7.458 -18.644 re B* 305.82 601.622 7.458 -33.559 re B* 0.9 g 145.48 579.249 7.458 -11.187 re B* 126.836 568.063 m 182.769 568.063 l S q 0 792.06 612 -792 re 132.802 707.521 m 134.294 713.487 l 135.785 707.521 l 135.785 714.233 l 132.802 714.233 l W n 134.294 713.487 m 134.294 534.503 l S Q 132.802 707.521 m 134.294 713.487 l 135.785 707.521 l S 0.7 g 410.227 676.199 7.458 -7.458 re B* 0.25 g 410.227 661.284 7.458 -7.458 re B* 0.9 g 410.227 706.03 7.458 -7.458 re B* 1.492 w 410.227 691.114 7.458 -7.458 re B* 0.373 w 275.989 687.385 7.458 -119.323 re B* 0.7 g 290.905 635.182 7.458 -67.119 re B* 0.9 g 1.492 w 358.024 720.945 7.458 -152.882 re B* 0.7 g 0.373 w 372.939 668.741 7.458 -100.678 re B* 0.25 g 387.854 616.538 7.458 -48.475 re B* 0.7 g 220.057 616.538 7.458 -48.475 re B* 190.226 575.521 m 190.077 575.371 l 189.729 575.123 l 189.282 574.675 l 188.088 573.582 l 187.492 573.084 l 187.044 572.587 l 186.746 572.189 l 186.497 571.792 l 186.299 571.344 l 186.249 570.847 l 186.249 570.4 l 186.299 569.902 l 186.398 569.455 l 186.448 569.008 l 186.497 568.51 l 186.497 567.615 l 186.547 567.118 l 186.597 566.671 l 186.696 566.174 l 186.746 565.726 l 186.746 565.279 l 186.696 564.781 l 186.497 564.334 l 186.249 563.936 l 185.951 563.539 l 185.503 563.041 l 184.906 562.544 l 184.31 561.948 l 183.713 561.45 l 183.266 561.003 l 182.918 560.754 l 182.769 560.605 l 193.955 575.521 m 193.806 575.371 l 193.458 575.123 l 193.01 574.675 l 191.817 573.582 l 191.221 573.084 l 190.773 572.587 l 190.475 572.189 l 190.226 571.792 l 190.027 571.344 l 189.978 570.847 l 189.978 570.4 l 190.027 569.902 l 190.127 569.455 l 190.176 569.008 l 190.226 568.51 l 190.226 567.615 l 190.276 567.118 l 190.326 566.671 l 190.425 566.174 l 190.475 565.726 l 190.475 565.279 l 190.425 564.781 l 190.226 564.334 l 189.978 563.936 l 189.679 563.539 l 189.232 563.041 l 188.635 562.544 l 188.039 561.948 l 187.442 561.45 l 186.995 561.003 l 186.647 560.754 l 186.497 560.605 l S BT 8.9492 0 0 8.9492 205.1415 553.1476 Tm 0 0 0 rg (Generic Library)Tj 0 -2.5 TD (P5 133 MHz)Tj 0 1.25 TD (OpenBSD 2.3)Tj -6.6667 1.25 TD (Original)Tj -3.5 5 TD (10)Tj -0.5 3.3333 TD (100)Tj -0.5 3.3333 TD (1000)Tj 1.5833 7.0833 TD (crypts/sec)Tj -2.0833 -3.75 TD (10000)Tj 36.25 -3.75 TD (BCrypt \(2**5 rounds\))Tj 0 1.6667 TD (MD5 Crypt)Tj 0 3.3333 TD (Traditional DES Crypt)Tj 0 -1.6667 TD (Bitsliced DES Crypt)Tj -7.5 -14.5833 TD (John the Ripper V1.5)Tj 0 -2.5 TD (Alpha 21164A 600MHz)Tj -9.1667 2.5 TD (John the Ripper V1.5)Tj 0 -1.25 TD (x86 Assembler)Tj T* (P5 133 MHz)Tj 7.4577 0 0 7.4577 350.5659 728.4026 Tm (214000)Tj -27.625 -19 TD (3.6)Tj 7.625 11 TD (2500)Tj 4.375 -10 TD (6.5)Tj 7.375 6.5 TD (335)Tj -2.5 7 TD (12500)Tj ET 0.9 g 130.565 627.724 m 138.023 627.724 l B* BT 7.4577 0 0 7.4577 371.0745 676.199 Tm 0 0 0 rg (850)Tj 1.875 -7 TD (62.5)Tj -22.125 0 TD (69)Tj 8.9492 0 0 8.9492 145.4803 541.9611 Tm (VAX-11/780*)Tj 0 -1.25 TD (1977)Tj 7.4577 0 0 7.4577 303.0233 609.08 Tm (22.5)Tj /T6 1 Tf 0.12 0 0 -0.12 146.88 505.62 Tm 0 g [(Figure)-26999.9()0()]TJ 363.0001 0 TD [(Impact)-27999.9(of)-28000(Algorithm)-26999.8(O)-0.2(ptimization)-27000(and)-28000(Adv)]TJ 1594 0 TD [(ance)-26999.8(in)-28000(Pro)-2000(cessors)]TJ -2581 264.9998 TD (able)Tj 187 0 TD (n)Tj 44 0 TD (um)Tj 113.0001 0 TD 1.9999 Tc [(be)1999.9(r)]TJ 156.0001 0 TD -0.0001 Tc (of)Tj 106 0 TD 0 Tc (rounds )Tj 338.9999 0 TD (With)Tj 226 0 TD (increasing)Tj 399.9999 0 TD [(pro)-2000(cess)]TJ -1570.9999 100 TD [(ing)-24000.1(p)-1999.9(o)]TJ 223.0001 0 TD (w)Tj 57.9999 0 TD [(er)-23000(t)0.1(hese)-24000.1(functions)-25000(b)-2000(ecome)-24000.1(steadily)-22999.8(easier)-23000(to)]TJ -281 100 TD (compute )Tj 407.0001 0 TD -0.0001 Tc (In)Tj 115.9999 0 TD 0 Tc (con)Tj 123 0 TD (trast)Tj /T7 1 Tf 237 0 TD (b)Tj 34 0 TD (crypt)Tj /T6 1 Tf 232.0001 0 TD (will)Tj 169 0 TD (adapt)Tj 247.9998 0 TD 0.0002 Tc (to)Tj 114.0002 0 TD 0 Tc (more)Tj -1680.0001 99 TD 2.0001 Tc (po)Tj 88.0001 0 TD 0 Tc (w)Tj 57.9999 0 TD (erful)Tj 208.0001 0 TD (attac)Tj 182.9999 0 TD (k)Tj 42 0 TD (ers )Tj 213 0 TD (Moreo)Tj 228 0 TD (v)Tj 42.0001 0 TD -0.0001 Tc (er)Tj 138.9999 0 TD 0.0001 Tc (its)Tj 132.9999 0 TD 0 Tc (inner)Tj 230 0 TD 0.0001 Tc [(lo)-1999.9(op)]TJ 199.0002 0 TD -0.0001 Tc (re)Tj -1763.0001 100 TD 0 Tc (lies)Tj 153 0 TD (exclusiv)Tj 285.0001 0 TD -0.0001 Tc (ely)Tj 140.9999 0 TD 0 Tc (on)Tj 125 0 TD [(op)-2000(erations)]TJ 414.0001 0 TD (that)Tj 188.9999 0 TD (are)Tj 149.0001 0 TD (ecien)Tj 246.9998 0 TD (t)Tj 69.0002 0 TD -0.0002 Tc (on)Tj -1772.0001 100 TD 0 Tc [(generalpurp)-1999.9(ose)-17000(C)-0.1(PUs)-21000(lea)]TJ 946 0 TD [(ving)-18000(little)-21000(opp)-2000(ortunit)]TJ 752.0001 0 TD 19 Tc [(yf)19000(o)19000.2(r)]TJ -1698.0001 99.0002 TD 0 Tc [(sp)-2000(ecialized)]TJ 419.0001 0 TD (hardw)Tj 225.0001 0 TD [(are)-30999.9(t)0(o)]TJ 249.9999 0 TD (ac)Tj 77 0 TD (hiev)Tj 148 0 TD [(e)-32000(dramatic)-32000(impro)]TJ 636.0001 0 TD (v)Tj 42 0 TD -0.0002 Tc (e)Tj -1797.0001 100 TD 0 Tc (men)Tj 149.9999 0 TD (ts )Tj /T5 1 Tf -149.9999 304 TD ()Tj 168 0 TD (Conclusion)Tj /T6 1 Tf -168 238 TD (Man)Tj 162 0 TD (y)Tj 100 0 TD (authen)Tj 247 0 TD (tication)Tj 334 0 TD (sc)Tj 68 0 TD (hemes)Tj 278 0 TD [(dep)-2000(end)]TJ 318.0001 0 TD (on)Tj 144.9998 0 TD (secret)Tj -1651.9999 100 TD (passw)Tj 212 0 TD (ords )Tj 232.0001 0 TD (Unfortunately)Tj 502.9998 0 TD ()Tj 60.0001 0 TD (the)Tj 149.0001 0 TD (length)Tj 260.9999 0 TD (and)Tj 168.0001 0 TD (en)Tj 80.9998 0 TD 0.0001 Tc (trop)Tj 151.0002 0 TD 0 Tc (y)Tj -1817.0001 100 TD 0.0001 Tc (of)Tj 113.0001 0 TD 0 Tc (the)Tj 161.9999 0 TD (passw)Tj 212.0001 0 TD (ords)Tj 198 0 TD (users)Tj 228 0 TD (c)Tj 35 0 TD [(ho)-2000(ose)]TJ 247 0 TD (remain)Tj 295.0001 0 TD (xed)Tj 220 0 TD (o)Tj 40 0 TD (v)Tj 42 0 TD (er)Tj -1792.0001 99 TD (time )Tj 255 0 TD 0.0001 Tc (In)Tj 115.0001 0 TD -0.0001 Tc (con)Tj 122.9999 0 TD 0 Tc (trast)Tj 236 0 TD (hardw)Tj 225 0 TD (are)Tj 148.9999 0 TD (constan)Tj 276.0001 0 TD (tly)Tj 137.0001 0 TD (impro)Tj 210.9998 0 TD (v)Tj 42.0002 0 TD -0.0001 Tc (es)Tj -1769.0001 100 TD 0 Tc (giving)Tj 268 0 TD (attac)Tj 183 0 TD (k)Tj 42 0 TD (ers)Tj 150 0 TD (increasing)Tj 409 0 TD (computational)Tj 570.0001 0 TD 1.9998 Tc (po)Tj 88 0 TD 0 Tc (w)Tj 58 0 TD (er )Tj -1768.0001 100 TD [(As)-28000.1(a)-27000(r)0.1(esult)-27000(passw)]TJ 658 0 TD [(ord)-26000(s)0(c)]TJ 215 0 TD [(hemes)-26999.9(including)-27999.8(the)-28000(t)0.2(radi)]TJ -873 98.9998 TD [(tional)-24000(UNIX)-25000(userauthen)]TJ 896.9999 0 TD [(tication)-23000.1(system)-24000(are)-23000.2(f)0(ailing)]TJ -896.9999 100.0001 TD [(to)-27000(withstand)-28000(oline)-28000(passw)]TJ 976 0 TD [(ord)-25000(guessing)-27000.1(attac)]TJ 657.9999 0 TD 0.0001 Tc (ks )Tj -1633.9999 199 TD 0 Tc [(In)-23000(this)-24000.1(p)0.1(ap)-1999.9(er)-23999.9(w)]TJ 568 0 TD [(e)-23000.1(f)0(ormalize)-22000.2(the)-24000(notion)-23000(o)0.1(f)-22999.9(a)-23000.2(passw)]TJ 1172.9999 0 TD 0.0001 Tc (ord)Tj -1740.9999 100 TD 0 Tc (sc)Tj 68 0 TD (heme)Tj 228 0 TD (as)Tj 156 0 TD 0.0001 Tc [(go)-1999.8(o)-1999.9(d)]TJ 215 0 TD 0 Tc (as)Tj 114.0001 0 TD (the)Tj 154.9999 0 TD (passw)Tj 212 0 TD (ords)Tj 191 0 TD (users)Tj 221.0001 0 TD (c)Tj 34.9998 0 TD [(ho)-2000.2(ose)]TJ -1594.9999 99 TD 0.0001 Tc (and)Tj 177 0 TD 0 Tc (sho)Tj 119 0 TD (w)Tj 103 0 TD (that)Tj 196 0 TD (the)Tj 158.0001 0 TD (computational)Tj 565 0 TD (cost)Tj 187 0 TD (of)Tj 109.9998 0 TD 0.0001 Tc (suc)Tj 114.0002 0 TD 0 Tc (h)Tj 89 0 TD (a)Tj -1818.0001 100 TD (sc)Tj 68 0 TD [(heme)-28999.9(m)]TJ 284.9999 0 TD [(ust)-30000.1(n)0.1(ecessarily)-28000(increase)-27999.9(w)-0.1(ith)-30000(t)0(he)-30000.2(sp)-2000.2(eed)-30000(of)]TJ -352.9999 100 TD (hardw)Tj 224.9999 0 TD 0.0001 Tc (are )Tj 191.0001 0 TD 0 Tc (W)Tj 78.0001 0 TD (e)Tj 72 0 TD [(prop)-2000(ose)]TJ 315 0 TD (t)Tj 29.9999 0 TD (w)Tj 58 0 TD (o)Tj 76 0 TD (algorithms)Tj 418.0001 0 TD (of)Tj 101.9998 0 TD (parame)Tj -1564.9999 99 TD [(terizable)-22000(cost)-21999.9(for)-21000.1(use)-23000(with)-23000(passw)]TJ 1154 0 TD (ords )Tj /T7 1 Tf 209 0 TD (Eksblow sh)Tj /T6 1 Tf 406.9999 0 TD 25.0002 Tc (a)Tj -1769.9999 100 TD -0.0001 Tc [(blo)-2000.2(c)]TJ 148.0001 0 TD 0 Tc [(k)-25999.9(c)0(ipher)-26000(lets)-27000(one)-26000(safely)-26000(store)-25000(e)0(ncrypted)-25999.8(p)-0.2(riv)]TJ 1601 0 TD (ate)Tj -1749.0001 99 TD (k)Tj 42.0001 0 TD [(eys)-30999.9(on)-32000(disk )]TJ /T7 1 Tf 483.9999 0 TD (Bcrypt)Tj /T6 1 Tf 241 0 TD ()Tj 57 0 TD [(a)-30999.9(h)-0.2(ash)-31999.9(function)]TJ 626.0001 0 TD [(can)-31000(replace)]TJ -1450.0001 100 TD (the)Tj 157.0001 0 TD (UNIX)Tj 259 0 TD (passw)Tj 212.0001 0 TD (ord)Tj 160.9999 0 TD (hashing)Tj 319 0 TD (function)Tj 339 0 TD -0.0002 Tc (or)Tj 116.0001 0 TD -0.0001 Tc (serv)Tj 144.9998 0 TD 0 Tc (e)Tj 78.0002 0 TD -0.0002 Tc (as)Tj -1786.0001 100 TD 31.0001 Tc [(af)31000.1(r)31000.2(o)31000(n)]TJ 217.0001 0 TD 0 Tc [(tend)-29999.9(t)0(o)-31000.1(s)0.1(ecure)-30000(passw)]TJ 789.0001 0 TD [(ord)-29000(p)0.1(roto)-2000.1(cols)-30000(lik)]TJ 600 0 TD [(e)-30000(SRP )]TJ -1606.0001 99 TD (W)Tj 78 0 TD (e)Tj 71 0 TD 0.0001 Tc (ha)Tj 86.0001 0 TD 0 Tc (v)Tj 41.9999 0 TD [(e)-32000(deplo)]TJ 261 0 TD (y)Tj 42 0 TD (ed)Tj /T7 1 Tf 115 0 TD (b)Tj 34 0 TD (crypt)Tj /T6 1 Tf 225 0 TD [(as)-32000(part)]TJ 293 0 TD (of)Tj 100 0 TD (the)Tj 148.9999 0 TD 0.0001 Tc [(Op)-1999.7(enBSD)]TJ -1495.9999 100 TD 0 Tc [(op)-1999.9(erating)-21000.1(s)0.1(ystems)-22000(passw)]TJ 904 0 TD [(ord)-21000(authen)]TJ 389.0001 0 TD (tication )Tj 333.9998 0 TD 0.0001 Tc [(So)-22999.9(far)]TJ 383.0002 -3233 TD -0.0002 Tc (it)Tj 101 0 TD 0 Tc (compares)Tj 382 0 TD (fa)Tj 65 0 TD (v)Tj 42 0 TD (orably)Tj 273 0 TD (to)Tj 120 0 TD (the)Tj 159.9998 0 TD (t)Tj 30.0002 0 TD (w)Tj 58 0 TD (o)Tj 86.9998 0 TD 0.0001 Tc (previous)Tj 348.0002 0 TD 0 Tc (hash)Tj -1666 100 TD [(ing)-29999.8(a)-0.2(lgorithms )]TJ 590 0 TD [(No)-30000(surprise)-29000.2(optimizations)-29000(ha)]TJ 1052 0 TD (v)Tj 42 0 TD 28 Tc (ey)Tj 107 0 TD 0 Tc (et)Tj -1791 100 TD [(turned)-25999.8(up )]TJ 417.9998 0 TD [(As)-26000.2(hardw)]TJ 346.0002 0 TD [(are)-24000(sp)-2000(eeds)-26000(increase)-25000(O)0(p)-2000(e)0(nBSD)]TJ -764 99 TD [(lets)-24000.2(one)-23999.8(p)-0.2(reserv)]TJ 558.9998 0 TD [(e)-22000(t)-0.2(he)-25000(cost)-24000(of)-23999.8(oline)-24000.2(passw)]TJ 941.0002 0 TD -0.0001 Tc [(ord)-21999.6(crac)]TJ 290 0 TD 0 Tc (k)Tj -1790 100 TD [(ing)-27000(b)]TJ 182 0 TD [(y)-27999.8(t)0(uning)-28000(a)-27000.2(simple)-28000.2(conguration)-25000(le )]TJ /T5 1 Tf -182 305.0002 TD ()Tj 167.9998 0 TD (Ac)Tj 132.0002 0 TD (kno)Tj 174 0 TD (wledgmen)Tj 485.9998 0 TD (ts)Tj /T6 1 Tf -959.9998 230 TD (W)Tj 77.9998 0 TD [(e)-30000.2(t)0(hank)-30000(Solar)-29000(Designer)-29000(for)-29000(helpful)-31000(discussions)-28000(on)]TJ -77.9998 90.9998 TD (optimization)Tj 496 0 TD -0.0001 Tc (and)Tj 171.9998 0 TD 0.0002 Tc (a)Tj 86 0 TD (ws)Tj 132.0002 0 TD -0.0002 Tc (of)Tj 104.9998 0 TD 0.0001 Tc (passw)Tj 212 0 TD 0 Tc (ord)Tj 158.0002 0 TD (sc)Tj 67.9998 0 TD 0.0001 Tc (hemes )Tj 315.9998 0 TD 0 Tc (W)Tj 78.0005 0 TD (e)Tj -1823 92 TD [(further)-30000(thank)-29000.2(A)0(ngelos)-28999.8(D )-30000(Kerom)]TJ 1195 0 TD -0.0001 Tc [(ytis)-29000.1(P)]TJ 239 0 TD 0 Tc [(eter)-29000(Honey)]TJ -1434 91.0002 TD [(man)-24999.8(Rob)-2000(e)0.2(rt)-25000(T )-25000(Morris)-23999.8(and)-25000.2(F)]TJ 1083.9998 0 TD [(rans)-24000.2(Kaasho)-2000(ek)-23000(for)-25000.5(r)0.5(e)]TJ -1083.9998 90.9998 TD [(marks)-25999.8(a)-0.2(nd)-28000(suggestions )]TJ /T5 1 Tf 0 305 TD (References)Tj /T20 1 Tf 38 191 TD -0.0001 Tc ( )Tj 122.9998 0 TD 0.0001 Tc (Mart)Tj 159.0002 0 TD 0 Tc ()Tj 7.9998 0 TD [(n)-20000(Abadi)-20000.2(T)0()-20000(M)0.2(ark)-19000.2(A)-18000(Lomas)-20000.2(and)-19000(Roger)-19000(Need)]TJ -167 92.0002 TD 0.0001 Tc (ham)Tj 247.0002 0 TD 0 Tc (Strengthening)Tj 511 0 TD (passw)Tj 194 0 TD -0.0001 Tc (ords)Tj 245 0 TD 0 Tc (T)Tj 49 0 TD -0.0002 Tc (ec)Tj 66 0 TD 0 Tc (hnical)Tj 242 0 TD 0.0001 Tc (note)Tj -1554.0002 90.9999 TD 0 Tc [( \012)-28000.2(DEC)-26000(Systems)-24999.8(R)-0.2(esearc)]TJ 1086.0002 0 TD [(h)-25999.8(Cen)]TJ 198.9998 0 TD 0.0001 Tc [(ter)-25999.9(Septem)]TJ -1285 91 TD 0 Tc [(b)-2000.2(e)0(r)-26000()0.2( )]TJ -122.9998 114 TD -0.0001 Tc ( )Tj 122.9998 0 TD (Stev)Tj 146.0002 0 TD [(en)-17000.3(M)-19000.1(Bello)]TJ 370 0 TD 0 Tc [(vin)-19000(and)-18000(Mic)]TJ 388.9998 0 TD [(hael)-20000(Merritt)-23000(Encrypted)]TJ -905 91 TD (k)Tj 39.0002 0 TD (ey)Tj 121.9998 0 TD (exc)Tj 107 0 TD (hange\015)Tj 296.0002 0 TD (P)Tj 50 0 TD 0.0001 Tc (assw)Tj 151 0 TD 0 Tc (ordbased)Tj 375 0 TD [(proto)-2000.2(cols)]TJ 353.9995 0 TD 0.0002 Tc (secure)Tj -1493.9998 92 TD 0 Tc (against)Tj 275.0002 0 TD (dictionary)Tj 375 0 TD (attac)Tj 167.9998 0 TD 0.0001 Tc (ks)Tj 157.0002 0 TD 0 Tc (In)Tj /T21 1 Tf 105.9998 0 TD 0.0002 Tc (Pr)Tj 80.0002 0 TD 0 Tc (o)Tj 35 0 TD (c)Tj 31 0 TD (e)Tj 31 0 TD (e)Tj 31 0 TD (dings)Tj 211 0 TD (of)Tj 99 0 TD (the)Tj -1599.0002 91 TD -0.0001 Tc ( )Tj 195.0002 0 TD 0 Tc (IEEE)Tj 223.9998 0 TD 0.0001 Tc (Symp)Tj 178.0002 0 TD 0 Tc (osium)Tj 237 0 TD -0.0002 Tc (on)Tj 120.9998 0 TD 0 Tc (Se)Tj 74 0 TD (curity)Tj 234.0002 0 TD (and)Tj 160 0 TD (Privacy)Tj /T20 1 Tf 254 0 TD ()Tj -1677.0002 91.0001 TD [(Oakland)-25999.8(CA)-26000.2(Ma)]TJ 597.0002 0 TD [(y)-25000()]TJ -720 113.9999 TD -0.0001 Tc ( )Tj 122.9998 0 TD (Stev)Tj 146.0002 0 TD -0.0002 Tc (en)Tj 119 0 TD 0 Tc (M)Tj 133.9998 0 TD (Bello)Tj 166.0002 0 TD (vin)Tj 149 0 TD (and)Tj 165.9998 0 TD 0.0001 Tc (Mic)Tj 123.0002 0 TD -0.0001 Tc (hael)Tj 180 0 TD 0 Tc (Merritt)Tj 351.9995 0 TD 0.0001 Tc (Aug)Tj -1534.9998 92.0001 TD 0 Tc (men)Tj 140.0002 0 TD (ted)Tj 145 0 TD (encrypted)Tj 369.9998 0 TD (k)Tj 39 0 TD 0.0002 Tc (ey)Tj 113.0002 0 TD -0.0001 Tc (exc)Tj 107 0 TD 0 Tc (hange)Tj 292.9998 0 TD (In)Tj /T21 1 Tf 110 0 TD -0.0005 Tc (Pr)Tj 80.0002 0 TD 0 Tc (o)Tj 34.9995 0 TD (c)Tj 31.0005 0 TD (e)Tj 30.9995 0 TD (e)Tj 31.0005 0 TD 0.0001 Tc (dings)Tj -1525.0002 90.9999 TD 0.0002 Tc (of)Tj 104.0002 0 TD -0.0001 Tc (the)Tj 142 0 TD 0 Tc (First)Tj 204 0 TD (A)Tj 54.9998 0 TD 0.0002 Tc (CM)Tj 166.0002 0 TD 0 Tc (Confer)Tj 223.9998 0 TD (enc)Tj 109 0 TD (e)Tj 78 0 TD 0.0002 Tc (on)Tj 124 0 TD 0 Tc (Computer)Tj 371.0002 0 TD -0.0003 Tc (and)Tj -1577.0002 90.9999 TD 0 Tc (Communic)Tj 359.0002 0 TD (ations)Tj 251 0 TD (Se)Tj 74 0 TD (curity)Tj /T20 1 Tf 194 0 TD ()Tj 77.9998 0 TD (pages)Tj 233.0002 0 TD (\012)Tj 345.9995 0 TD 0.0003 Tc (Oak)Tj -1534.9998 92.0001 TD 0 Tc [(land)-25999.8(CA)-26000.2(N)0(o)]TJ 446.0002 0 TD (v)Tj 39 0 TD -0.0002 Tc (em)Tj 96.9998 0 TD 0 Tc [(b)-2000.2(e)0.2(r)-24000.2()]TJ -704.9998 113.9999 TD -0.0001 Tc ( )Tj 122.9998 0 TD 0.0001 Tc (Eli)Tj 129.0002 0 TD 0 Tc (Biham)Tj 302.9998 0 TD (A)Tj 93.0002 0 TD (F)Tj 43.9998 0 TD 0.0001 Tc (ast)Tj 132.0002 0 TD -0.0001 Tc (New)Tj 182 0 TD (DES)Tj 188 0 TD 0 Tc (Implemen)Tj 331 0 TD -0.0001 Tc (tation)Tj 232.9995 0 TD 0 Tc (in)Tj -1634.9998 91.0001 TD 0.0001 Tc (Soft)Tj 132 0 TD 0 Tc (w)Tj 53.0002 0 TD -0.0001 Tc (are)Tj 206 0 TD -0.0002 Tc (In)Tj /T21 1 Tf 112 0 TD 0 Tc (F)Tj 44 0 TD -0.0001 Tc (ast)Tj 138.9998 0 TD 0 Tc (Softwar)Tj 249 0 TD (e)Tj 78.0002 0 TD -0.0001 Tc (Encryption)Tj 440 0 TD 0 Tc (th)Tj 146 0 TD (In)Tj ET endstream endobj 56 0 obj << /ProcSet [/PDF /Text ] /Font << /TT2 37 0 R /T5 8 0 R /T6 9 0 R /T7 10 0 R /T20 57 0 R /T21 58 0 R >> /ExtGState << /GS1 11 0 R >> >> endobj 62 0 obj << /Length 8044 >> stream BT /T21 1 Tf 0.12 0 0 -0.12 91.32 723.9 Tm 0 g /GS1 gs 0 Tc 0 Tw (ternational)Tj 397 0 TD (Workshop)Tj 363.9999 0 TD 0.0002 Tc (Pr)Tj 80.0001 0 TD 0 Tc (o)Tj 35.0001 0 TD (c)Tj 31 0 TD (e)Tj 31 0 TD (e)Tj 31 0 TD (dings)Tj /T20 1 Tf 171.9999 0 TD ()Tj 54 0 TD [(pages)-30999.8(\012 )]TJ -1195 91 TD (SpringerV)Tj 360 0 TD [(erlag)-26000( )]TJ -482.9999 125 TD -0.0001 Tc ( )Tj 122.9999 0 TD 0 Tc [(Solar)-26000(Designer)]TJ 541 0 TD [(John)-25999.9(the)-26000.1(Ripp)-2000(er)]TJ /T22 1 Tf -541 90.9995 TD [(http wwwfalsecomsecurity)-1000.2(john)]TJ /T20 1 Tf 1327.9999 0 TD ()Tj -1450.9998 125 TD -0.0001 Tc ( )Tj 122.9999 0 TD 0 Tc (Electronic)Tj 382 0 TD (F)Tj 44 0 TD (ron)Tj 109 0 TD (tier)Tj 159 0 TD (F)Tj 44.0001 0 TD (oundation)Tj /T21 1 Tf 446.9999 0 TD (Cr)Tj 83 0 TD (acking)Tj 257.0001 0 TD -0.0001 Tc (DES)Tj /T20 1 Tf 152.9998 0 TD 0 Tc ()Tj -1677.9999 91.0005 TD [(OReilly)-26000.1(and)-24999.9(A)0(sso)-2000(c)0(iates)-28000.1()]TJ -122.9999 125 TD -0.0001 Tc ( )Tj 122.9999 0 TD 0 Tc [(Li)-29000(Gong)-29999.9(T)-29000(Mark)-29000(A)-28000(Lomas)-30000.1(R)-0.1(oger)-29000.1(M)0()-29000(N)0.2(eedham)]TJ 0 91 TD [(and)-32000(J)0.1(erome)]TJ 429 0 TD [(H)-32000(Saltzer)]TJ 418 0 TD (Protecting)Tj 384.0001 0 TD 1.9999 Tc [(poo)1999.7(r)2000.1(l)1999.9(y)]TJ 247.9998 0 TD 0 Tc (c)Tj 32.0002 0 TD (hosen)Tj -1511.0001 91 TD (secrets)Tj 260 0 TD (from)Tj 194 0 TD (guessing)Tj 315.0001 0 TD (attac)Tj 167.9999 0 TD (ks)Tj /T21 1 Tf 162 0 TD (IEEE)Tj 224.0001 0 TD (Journal)Tj 293.9998 0 TD 0.0002 Tc (on)Tj -1616.9999 92 TD 0 Tc (Sele)Tj 129 0 TD (cte)Tj 90.9999 0 TD 31.0001 Tc (dA)Tj 125.0001 0 TD 0 Tc (r)Tj 28 0 TD (e)Tj 31 0 TD [(as)-32000(in)-29000(Communic)]TJ 557 0 TD (ations)Tj /T20 1 Tf 201 0 TD [()-30000.1(\015)]TJ -1162 91 TD [(June)-26000()]TJ -122.9999 124 TD -0.0001 Tc ( )Tj 122.9999 0 TD 0 Tc [(Shai)-26000(Halevi)-26000(and)-26000(Hugo)-25000(Kra)]TJ 888.0001 0 TD (w)Tj 52.9999 0 TD (czyk)Tj 206 0 TD (Publick)Tj 279.0001 0 TD -0.0001 Tc [(ey)-25000.3(cryp)]TJ -1426.0001 92 TD 0 Tc (tograph)Tj 258.0001 0 TD [(y)-19999.9(and)-20000(passw)]TJ 398.9999 0 TD [(ord)-21000.1(p)0(roto)-2000.1(cols)-27000(In)]TJ /T21 1 Tf 575.0001 0 TD -0.0001 Tc (Pr)Tj 79.9998 0 TD 0 Tc (o)Tj 35 0 TD (c)Tj 31 0 TD (e)Tj 31 0 TD (e)Tj 31 0 TD [(dings)-24000(of)]TJ -1439.9999 91 TD -0.0001 Tc (the)Tj 133.0001 0 TD (th)Tj 135.9999 0 TD 0 Tc (A)Tj 55 0 TD [(CM)-32000(Confer)]TJ 380 0 TD 0.0001 Tc (enc)Tj 109.0001 0 TD 0 Tc (e)Tj 69.9999 0 TD (on)Tj 115 0 TD (Computer)Tj 363.0001 0 TD (and)Tj 153.9998 0 TD (Com)Tj -1514.9999 91 TD (munic)Tj 202.0001 0 TD [(ations)-28000(Se)]TJ 302.9999 0 TD (curity)Tj /T20 1 Tf 194 0 TD [()-28000()0.1()]TJ -821.9999 125 TD -0.0001 Tc ( )Tj 122.9999 0 TD 0 Tc [(Rob)-2000.1(ert)-18000.1(M)0.1(orris)-21000.1(and)-18000(Ken)-18000.1(Thompson)-23000(P)]TJ 1238.0001 0 TD 0.0001 Tc (assw)Tj 151 0 TD 0 Tc [(ord)-20000(Secu)]TJ -1389.0001 91 TD (rit)Tj 79 0 TD [(y\015)-31000(A)-18000(Case)-20000(History)]TJ 588.0001 0 TD ()Tj /T21 1 Tf 44.9999 0 TD (Communic)Tj 359 0 TD [(ations)-22000.1(of)-20999.8(the)-22000.2(A)]TJ 482.9999 0 TD (CM)Tj /T20 1 Tf 124 0 TD ()Tj -1677.9999 91.9995 TD [(\015 )-30000(No)]TJ 644 0 TD (v)Tj 39 0 TD 0.0001 Tc (em)Tj 97 0 TD 0 Tc [(b)-2000(e)0(r)-24000.1()0( )]TJ -941 124 TD ( \012)Tj 161 0 TD (National)Tj 324 0 TD (Bureau)Tj 278 0 TD (of)Tj 98 0 TD (Standards)Tj 422.9999 0 TD 0.0001 Tc (Data)Tj 201.0002 0 TD 0 Tc (Encryption)Tj -1324.0001 91.0005 TD [(Standard)-24999.9(Jan)]TJ 472 0 TD [(uary)-26000( )]TJ 387 0 TD [(FIPS)-25000.1(Publication)-27000.2()]TJ -1020 124.9998 TD ( )Tj 161 0 TD (Sarv)Tj 148 0 TD 0.0001 Tc [(ar)-29999.9(P)]TJ 148 0 TD 0 Tc (atel)Tj 192 0 TD 0.0001 Tc (Num)Tj 164 0 TD 0 Tc [(b)-2000(e)0(r)-28000.1(t)0(heoretic)-30000.1(attac)]TJ 629 0 TD -0.0001 Tc [(ks)-31000.3(on)-30000.1(secure)]TJ -1281 91.0002 TD 0 Tc (passw)Tj 194 0 TD 0.0001 Tc [(ord)-19999.8(s)0(c)]TJ 193 0 TD 0 Tc [(hemes)-23000(In)]TJ /T21 1 Tf 339.0001 0 TD -0.0001 Tc (Pr)Tj 79.9999 0 TD 0 Tc (o)Tj 35 0 TD (c)Tj 31 0 TD (e)Tj 31 0 TD (e)Tj 31 0 TD [(dings)-23999.9(o)-0.1(f)-20999.9(the)-21999.8( )-22000(IEEE)]TJ -934 91.9998 TD (Symp)Tj 178 0 TD (osium)Tj 237 0 TD (on)Tj 122 0 TD (Se)Tj 74.0001 0 TD (curity)Tj 234 0 TD -0.0001 Tc (and)Tj 160.9999 0 TD 0 Tc (Privacy)Tj /T20 1 Tf 254 0 TD ()Tj 63.0001 0 TD (pages)Tj 222 0 TD -0.0001 Tc ()Tj -1545.0001 91 TD 0 Tc [( )-27000.1(O)0.1(akland)-26000(CA)-26000(Ma)]TJ 759 0 TD [(y)-25000()-0.1( )]TJ -920 124.0002 TD ( )Tj 161 0 TD (QCrac)Tj 215.0001 0 TD -0.0001 Tc (k)Tj /T22 1 Tf 306.9999 0 TD 0 Tc [(ftp chaosinfospacecompu)-999.8(b)0()]TJ -522 92 TD (qcrackqcracktargz)Tj /T20 1 Tf 975.0001 0 TD ()Tj -1136.0001 124 TD ( )Tj 161 0 TD [(R)-23000(L)-23000(Riv)]TJ 310 0 TD [(est)-29000(The)-23000(MD)-23999.9(M)-0.1(essage)-25000(Digest)-22999.8(Algorithm)]TJ -310 91.9998 TD (RF)Tj 105.0001 0 TD [(C)-26000()-27000.1(Apr)-25000.1()0.1()]TJ -266.0001 124 TD ( )Tj 161 0 TD (Mic)Tj 123 0 TD (hael)Tj 184 0 TD (Rub)Tj 141 0 TD (y)Tj 35.0001 0 TD ()Tj /T21 1 Tf 113.9999 0 TD (Pseudor)Tj 265 0 TD (andomness)Tj 413 0 TD (and)Tj 168.0001 0 TD (Crypto)Tj -1443.0001 92.0002 TD (gr)Tj 63 0 TD [(aphic)-30000(Applic)]TJ 416 0 TD (ations)Tj /T20 1 Tf 201 0 TD ()Tj 59.0001 0 TD [(Princeton)-27999.9(Computer)-26000(Science)]TJ -739.0001 91 TD [(Notes)-26000()]TJ -161 123.9998 TD ( )Tj 161 0 TD (Bruce)Tj 234.0001 0 TD (Sc)Tj 74.9999 0 TD (hneier)Tj 300 0 TD (Description)Tj 423.0001 0 TD (of)Tj 100 0 TD (a)Tj 77.9999 0 TD (New)Tj 186.0001 0 TD (V)Tj 51.9998 0 TD (ariable)Tj -1447.9999 92.0002 TD (Length)Tj 273 0 TD 0.0001 Tc (Key)Tj 129 0 TD 0 Tc ()Tj 60 0 TD (Bit)Tj 245 0 TD 0.0001 Tc [(Blo)-1999.8(c)]TJ 147 0 TD 0 Tc (k)Tj 79 0 TD (Cipher)Tj 263 0 TD (Blo)Tj 140.9999 0 TD (wsh)Tj 292 0 TD 0.0002 Tc (In)Tj /T21 1 Tf -1628.9999 90.9998 TD 0 Tc (F)Tj 44 0 TD (ast)Tj 157 0 TD (Softwar)Tj 249 0 TD (e)Tj 97 0 TD (Encryption)Tj 464 0 TD (Cambridge)Tj 417.9999 0 TD (Se)Tj 74 0 TD (curity)Tj -1502.9999 91 TD (Workshop)Tj 377 0 TD (Pr)Tj 80 0 TD (o)Tj 35.0001 0 TD (c)Tj 30.9999 0 TD (e)Tj 31 0 TD (e)Tj 31 0 TD (dings)Tj /T20 1 Tf 172.0001 0 TD ()Tj 71.9999 0 TD (pages)Tj 228.0001 0 TD (\012)Tj 333.9998 0 TD (Springer)Tj -1390.9999 92.0002 TD (V)Tj 52.0001 0 TD [(erlag)-26000(Decem)]TJ 431.9999 0 TD [(b)-2000(e)0(r)-25000()]TJ -645 124 TD ( )Tj 161 0 TD [(Thomas)-20000(W)]TJ 362 0 TD [(u)-23999.9(The)-19000(secure)-20000.1(remote)-20000(passw)]TJ 909 0 TD [(ord)-20000(proto)-2000(col)]TJ -1271 91.9998 TD 0.0001 Tc (In)Tj /T21 1 Tf 88.9999 0 TD (Pr)Tj 80.0001 0 TD 0 Tc (o)Tj 35 0 TD (c)Tj 31 0 TD (e)Tj 31 0 TD (e)Tj 31 0 TD [(dings)-24000(of)-21000(the)-22000.1( )-22000.1(Internet)-22999.9(S)0(o)]TJ 948 0 TD [(ciety)-21999.8(Network)]TJ -1245 91 TD [(and)-26000(D)-0.1(istribute)]TJ 473 0 TD [(d)-27000.1(S)0.1(ystem)-26000(Se)]TJ 400 0 TD [(curity)-27000.1(Symp)]TJ 399 0 TD (osium)Tj /T20 1 Tf 198.0001 0 TD 23.9998 Tc [(p)23999.6(a)23999.8(g)24000(e)23999.6(s)]TJ -1470.0001 91 TD 0 Tc [( )-28000.1(San)-25999.9(D)-0.1(iego)-26000(C)0.1(A)-26000(Marc)]TJ 994.0001 0 TD [(h)-26999.9()]TJ -1155.0001 125.0001 TD ( )Tj 161 0 TD (T)Tj 49.0001 0 TD [(atu)-27000.1(Y)0.1(l)]TJ 216.9999 0 TD (onen)Tj 219 0 TD [(SSH)-27000()-27000(s)-0.1(ecure)-28000.1(login)-29000.1(c)0.1(onnections)-27999.8(o)]TJ 1111.0001 0 TD (v)Tj 38.9998 0 TD 0.0002 Tc (er)Tj -1634.9999 91.0001 TD 0 Tc (the)Tj 143.0001 0 TD (In)Tj 69 0 TD (ternet)Tj 286.9999 0 TD (In)Tj /T21 1 Tf 107 0 TD (Pr)Tj 80.0001 0 TD (o)Tj 34.9999 0 TD (c)Tj 31 0 TD (e)Tj 31 0 TD (e)Tj 31.0001 0 TD (dings)Tj 211 0 TD -0.0001 Tc (of)Tj 100 0 TD (the)Tj 136.9999 0 TD 0 Tc ( th)Tj 140.9999 0 TD (USENIX)Tj -1402.9999 90.9999 TD 0.0001 Tc (Se)Tj 74.0001 0 TD 0 Tc [(curity)-29000(Symp)]TJ 400.9999 0 TD (osium)Tj /T20 1 Tf 198.0001 0 TD [()-26000(pages)-27000( )-28000.1(J)0.1(uly)-25000()]TJ ET endstream endobj 63 0 obj << /ProcSet [/PDF /Text ] /Font << /T20 57 0 R /T21 58 0 R /T22 64 0 R >> /ExtGState << /GS1 11 0 R >> >> endobj 30 0 obj << /Type /XObject /Subtype /Image /Width 1 /Height 1 /BitsPerComponent 1 /ImageMask true /Length 2 >> stream endstream endobj 11 0 obj << /Type /ExtGState /SA false /SM 0.02 /OP false /op false /OPM 1 /BG2 /Default /UCR2 /Default /HT /Default /TR2 /Default >> endobj 65 0 obj << /Type /FontDescriptor /Ascent 750 /CapHeight 662 /Descent -250 /Flags 34 /FontBBox [-168 -218 1000 898] /FontName /Times-Roman /ItalicAngle 0 /StemV 84 /XHeight 450 /StemH 84 >> endobj 66 0 obj << /ProcSet [/PDF /ImageB ] >> endobj 4 0 obj << /Name /T1 /Type /Font /Subtype /Type3 /Resources 66 0 R /FontBBox [1 -23 108 84] /FontMatrix [1 0 0 -1 0 0] /FirstChar 0 /LastChar 119 /Encoding 67 0 R /CharProcs 68 0 R /Widths [45 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 102 0 0 0 0 85 0 0 0 0 0 0 0 0 0 92 0 0 75 0 0 0 0 0 0 0 0 0 0 0 0 0 65 75 60 75 61 0 0 75 0 0 0 37 112 0 67 75 0 55 53 52 75 0 97 ] /ToUnicode 69 0 R >> endobj 67 0 obj << /Type /Encoding /Differences [0/- 65/A 70/F 80/P 83/S 97/a /b /c /d /e 104/h 108/l /m 111/o /p 114/r /s /t /u 119/w ] >> endobj 68 0 obj << /- 70 0 R /A 71 0 R /F 72 0 R /P 73 0 R /S 74 0 R /a 75 0 R /b 76 0 R /c 77 0 R /d 78 0 R /e 79 0 R /h 80 0 R /l 81 0 R /m 82 0 R /o 83 0 R /p 84 0 R /r 85 0 R /s 86 0 R /t 87 0 R /u 88 0 R /w 89 0 R >> endobj 70 0 obj << /Length 138 >> stream 45 0 1 21 37 32 d1 q 36 0 0 11 1.1 20.9 cm BI /W 36 /H 11 /BPC 1 /IM true ID EI Q endstream endobj 71 0 obj << /Length 1091 >> stream 102 0 5 0 96 84 d1 q 91 0 0 84 5.1 -0.1 cm BI /W 91 /H 84 /BPC 1 /IM true ID џџџџџрџџџџџџџџџџџРџџџџџџџџџџ?џџџџџџџџџџ?џџџџџџџџџџ џџџџџџџџџџ џџџџџџџџџџ џџџџџџџџџў џџџџџџџџџў џџџџџџџџџќ џџџџџџџџџќ џџџџџџџџџќ џџџџџџџџџј џџџџџџџџџј џџџџџџџџџј џџџџџџџџџ№ џџџџџџџџџ№ џџџџџџџџџр џџџџџџџџџр џџџџџџџџџр џџџџџџџџџР џџџџџџџџР џџџџџџџџ ?џџџџџџџџ ?џџџџџџџџР ?џџџџџџџџР џџџџџџџџр џџџџџџџўр џџџџџџџўр џџџџџџџў№ џџџџџџџќ№ џџџџџџџќј џџџџџџџјј џџџџџџџјј џџџџџџџјќ џџџџџџџ№ќ џџџџџџџ№?ў џџџџџџџр?ў џџџџџџџрў џџџџџџџрџ џџџџџџџРџ џџџџџџРџџ џџџџџџџџ ?џџџџџџџџ ?џџџџџџџџР ?џџџџџџџџР џџџџџџџџр џџџџџўџџр џџџџџўџџр џџџџџўџџ№ џџџџџќџџ№ џџџџџќџџј џџџџџјџџј џџџџџјџџј џџџџџјџџќ џџџџџ№ џџџџџ№ џџџџџр џџџџџр џџџџџр џџџџџРџџџ џџџџРџџџџ џџџџџџџџ ?џџџџџџџџ ?џџџџџџџџР ?џџџџџџџџР џџџџџџџџр џџџўџџџџр џџџўџџџџр џџџўџџџџ№ џџџќџџџџ№ џџџќџџџџј џџџјџџџџј џџџјџџџџј џџџјџџџџќ џџџ№џџџџќ џџџ№?џџџџќ џџџр?џџџџў џџџ џџџџў џџ џџ№ џџ№ џџ№ џџ№ џџ№ EI Q endstream endobj 72 0 obj << /Length 892 >> stream 85 0 4 0 78 81 d1 q 74 0 0 81 4.1 -0.1 cm BI /W 74 /H 81 /BPC 1 /IM true ID џ џ џ џ џџј џџј џџј џџџ џџј џџџр џџј џџџј џџј џџџќ џџј џџџў џџј џџџџ џџј џџџџџџј џџџџРџџј џџџџРџј џџџџРџј џџџџрџј џџџџрџј џџџџрџј џџџџ№џј џџџџ№џј џџџџ№џј џџџџ№џј џџџџ№?џј џџџј?џј џџџј?џј џџџј?џј џџџј?џј џџџџџџј џџџџџџј џџџџџџј џўџџџџј џўџџџџј џўџџџџј џќџџџџј џјџџџџј џ№џџџџј џџџџџј џџџџј џџџџј џџџџј џџџџј џџџџј џџџџџј џ№џџџџј џјџџџџј џќџџџџј џўџџџџј џўџџџџј џўџџџџј џџџџџџј џџџџџџј џџџџџџј џџџџџџј џџџџџџј џџџџџџј џџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџ џџџџ џџџџ џџџџ џџџџ џџџџ EI Q endstream endobj 73 0 obj << /Length 902 >> stream 92 0 4 0 84 82 d1 q 80 0 0 82 4.1 -0.1 cm BI /W 80 /H 82 /BPC 1 /IM true ID џџџ џџ џџ џ џџј џџр џџј џџў џџј џџџ џј џџџР ?џј џџџ№ џј џџџ№ џј џџџј џј џџџќ џј џџџќ џј џџџќ џј џџџў џј џџџў џј џџџў џј џџџў џј џџџў џј џџџў џј џџџў џј џџџў џј џџџў џј џџџў џј џџџў џј џџџў џј џџџў џј џџџў џј џџџў џј џџџў џј џџџќ џј џџџќ џј џџџќ џј џџџј џј џџџ№ џј џџџр џј џџџР ?џј џџџ џџј џџў џџј џџр џџј џџј ?џџј џџџј џџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџџј џџџџџџ ?џџџџ ?џџџџ ?џџџџ ?џџџџ ?џџџџ EI Q endstream endobj 74 0 obj << /Length 755 >> stream 75 0 7 -1 67 83 d1 q 60 0 0 84 7.1 -1.1 cm BI /W 60 /H 84 /BPC 1 /IM true ID џџ№ џјџџџ џ№џџј џрџџр ?РџџР џџ џ џў џ№ џќ џў џјџџџ џ№џџџР џ№џџџ№ џрџџџј џрџџџќ џРџџџќ џРџџџў џџџџџ џџџџџ џџџџџџ џџџџџ џџџџРџ џџџџРџ џџџџРџ џџџџРџ џџџџрџ џџџџрџ џџџџрџ џџџџрџ џџџџџџ ?џџџџџ џџџџџ џџџџџ џџџџР џџџР џџџр ?џџр џџ№ џџј џџќ ?џў џџ џџ џџР џџ№ џџќ џџџ џџџр џџџ џџџ№ ?џџџџ ?џџџџј џџџџџ џџџџџР џџџџџ№ џџџџџј џџџџџќ џџџџџќ џџџџў џџџџџ џџџџџ џџџџџ џџџџџџџџџџџџџџџџџџџџџџџџџџџџџџџџџџџ џџџџџ ? џџџџџ ? џџџџ ? ?џџџў џџџў џ џџџќ џ џџџјџ џџџ№џ ?џџрџ џџџ р ?ќ џ№ ?џќ џџџ џџџ№ џџџџ џџџ EI Q endstream endobj 75 0 obj << /Length 531 >> stream 65 0 4 -1 64 55 d1 q 60 0 0 56 4.1 -1.1 cm BI /W 60 /H 56 /BPC 1 /IM true ID џџ џџџџџј џџџџР џџџџ џџў № ?џџќџў џџј џџ џџј џРџџ№ џРџџ№ ?џрџџ№ ?џр џџ№ ?џ№ џ№ ?џ№ џ№ ?џ№ џј џј ?џј џј ?џќ џџј ?џўџџј ?џџџџџј ?џџџџџј ?џџџџџј ?џџџџџј ?џџџџџј ?џџџџџј ?џџџџ ?џџџ№ ?џџџ ?џџј x ?џџР ј ?џџ ј ?џў џј ?џќ џј ?џј џј ?џ№ ?џј ?џр џј ?џР џџј ?џ џџј ?џџџј ?џџџј ?џ џџј ?џ џџј ?џ џџј ?џ џџј ?џ џџ№ ?џ џџ№ ?џ џџр ?џџџт ?џџџТ ?џР џџ џр џ џ№ ?ќ ј р? ќ џ џр џр џј џў џџџџ EI Q endstream endobj 76 0 obj << /Length 839 >> stream 75 0 5 -1 70 83 d1 q 65 0 0 84 5.1 -1.1 cm BI /W 65 /H 84 /BPC 1 /IM true ID џРџџџџџџ џџџџџџ џџџџџџ џџџџџџ џџџџџџ џџџџџџќ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ ў џџџџ № џџџџ Р ?џџџ џџџ ў џџџ џРџџџ џ№ џџџ џј џџ џџќ ?џџ џџў џџ џџў џџ џџџ џџ џџџ џџ џџџџџ џџџџџ џџџџџ џџџџџ џџџ џџ џџџР џџ џџџР џџ џџџР џџ џџџР џ џџџР џ џџџР џ џџџР џ џџџР џ џџџР џ џџџР џ џџџР џ џџџР џ џџџР џ џџџР џ џџџР џ џџџР џџ џџџР џџ џџџР џџ џџџР џџ џџџџџ џџџџџ џџџџџ џџџџџ џџџ џџ џџџ џџ џџў џџ џџў џџ џџќ џџ џџј ?џџ џ№ џџ 0?џр џџџ xџџџџ ќќ џџџџ џџџџ џџџџр џџџџџџќ ?џџџ EI Q endstream endobj 77 0 obj << /Length 475 >> stream 60 0 4 -1 55 55 d1 q 51 0 0 56 4.1 -1.1 cm BI /W 51 /H 56 /BPC 1 /IM true ID џџў џџџџр џџџ џџќ џџ№ ?№џџрџў џџџќ џ џј ў џј ?ќ џ№ ?ќ ?џ№ ?ј ?џ№ ?№ џ№ ?№ џ№ ?р џј р џџј Р џџќ џР џџўџ џџџџџџџџџџџџџџџџџџџџ џџџџџ џџџџџ џџџџџ џџџџџ џџџџџ џџџџџ џџџџџ џџџџџ џџџџџ џџџџџ џџџџџ џџџџџ џџџџџџџџџџ џџџџџ џџџџџР џџџџџР џџџџџР џџџќр џџќр џџј№ ?џџј?ј ?џџј?ј џџ№?ќ џџрў џџРџџ џџџџџџџџР џќџџ№ рџџќ џџџ џџџР џџџџў џџ EI Q endstream endobj 78 0 obj << /Length 839 >> stream 75 0 4 -1 69 83 d1 q 65 0 0 84 4.1 -1.1 cm BI /W 65 /H 84 /BPC 1 /IM true ID џџџџџў џџџџџј џџџџџј џџџџџј џџџџџј џџџџџј џџџџџџр џџџџџџј џџџџџџј џџџџџџј џџџџџџј џџџџџџј џџџџџџј џџџџџџј џџџџџџј џџџџџџј џџџџџџј џџџџџџј џџџџџџј џџџџџџј џџџџџџј џџџџџџј џџџџџџј џџџџџџј џџџџџџј џџџџџџј џџџџџџј џџџџџџј џџџџџџј џџџў ј џџџр ј џџџ ј џџќ 8 џџ№ Р џџр џј џџџў џџ џџ џў џџР џќ џџр џј ?џџр џј ?џџ№ џ№ џџ№ џр џџ№ џр џџџ№ џР џџџ№ џР џџџ№ џР џџџ№ џџџџ№ џџџџ№ џџџџ№ џџџџ№ џ џџџ№ џ џџџ№ џ џџџ№ џ џџџ№ џ џџџ№ џ џџџ№ џ џџџ№ џ џџџ№ џ џџџ№ џ џџџ№ џ џџџ№ џ џџџ№ џџџџ№ џџџџ№ џџџџ№ џР џџџ№ џР џџџ№ џР џџџ№ џр џџџ№ џр џџџ№ џ№ џџ№ џ№ џџр џј ?џџР џќ ?џџР џў џџ џџ џў џџџќ џџРџ№ џ№ ?0 џј p џў № џџР № џџќ ?№џџ EI Q endstream endobj 79 0 obj << /Length 475 >> stream 61 0 4 -1 56 55 d1 q 52 0 0 56 4.1 -1.1 cm BI /W 52 /H 56 /BPC 1 /IM true ID џџќ ?џџџџР џџџў џџџј ?џџ№ ~ џџРџџџџРџџ џрџў џ№џќ ?џј џј ?џј № џќ № џќ ?р џў ?р џџў ?Р џџў Р џџў џџџ џџџ џџџ џџџ џџџ џџџ џџџ џџџ џџџџџ џџџџџ џџџџџ џџџџџ џџџџџ џџџџџџџџџџџџџџџ џџџџџР џџџџџР џџџџџР џџџџр џџџўр џџќ№ џџќј ?џџјј ?џџјќ џџ№?ў џџр?џ џџРџџџ џџрџќџџ№ ?Рџџќ џџџ ?џџџр џџџџў џџ EI Q endstream endobj 80 0 obj << /Length 829 >> stream 75 0 5 0 71 83 d1 q 66 0 0 83 5.1 -0.1 cm BI /W 66 /H 83 /BPC 1 /IM true ID џРџџџџџџ џџџџџџ џџџџџџ џџџџџџ џџџџџџ џџџџџџќ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џрџџџџ џ ?џџџ ќ џџџ № џџџ рџџџ Рџрџџџ џр џџџ џ№ џџџ џ№ џџ ?џ№ џџ џј џџ џј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џ ј ? ј ? ј ? ј ? ј ? EI Q endstream endobj 81 0 obj << /Length 414 >> stream 37 0 5 0 33 83 d1 q 28 0 0 83 5.1 -0.1 cm BI /W 28 /H 83 /BPC 1 /IM true ID џРџ џ џ џ џ џў џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џџ џ EI Q endstream endobj 82 0 obj << /Length 788 >> stream 112 0 5 0 108 54 d1 q 103 0 0 54 5.1 -0.1 cm BI /W 103 /H 54 /BPC 1 /IM true ID џРџрџџџ џџ џ ?џј џџ ќ џр џ № џ ?џ рџ ќ џ Рџрўџ џќ џр ќџ џџ џ№ јџџџ џ№ pџџџџ ?џ№ aџџџџ џј CџџРџџ џј џџРџџ џџј џџРџџ џџј џџРџџ џџј џџРџџ џџј џџРџџ џџј џџРџџ џџј џџРџџ џџј џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџџ џџј ?џџРџ ј ?Р ј ?Р ј ?Р ј ?Р ј ?Р EI Q endstream endobj 83 0 obj << /Length 531 >> stream 67 0 4 -1 62 55 d1 q 58 0 0 56 4.1 -1.1 cm BI /W 58 /H 56 /BPC 1 /IM true ID џџў џџџџџр џџџџџ ?џџџќ џџџ№ џџџрџ№џџџџј џџ џќ ?џў џў џќ ?џџ џќ џџџј џџџ№ џџџРџ№ џџџРџр џџџРџр џџџРџРџџџр џРџџџр џРџџџр џџџџр џџџр џџџр џџџр џџџр ? џџџр ? џџџр ? џџџр ? џџџр ? џџџр ? џџџр ? џџџр ? џџџр ? џџџр ? џџџр ? џџџр ?џџџр џџџр џџџр Рџџџр џР џџџР џР џџџР џр џџџРџр џџџРџ№ џџџРџ№ џџџј џџџќ ?џџ џў џў џџ џќ ?џџџј џџРџр џџџ№ џџџј џџџџ ?џџџџР џџџџџў џџџ EI Q endstream endobj 84 0 obj << /Length 778 >> stream 75 0 5 -23 70 54 d1 q 65 0 0 77 5.1 -23.1 cm BI /W 65 /H 77 /BPC 1 /IM true ID џРў џџџ № џџџ Р ?џџ џџ ў џџ џџџќ џр џџџ џ№ џџ џџј ?џџ џџј џџ џџќ џџ џџў џџ џџў џџ џџџ џџ џџџ џџ џџџ џџ џџџџџ џџџ џџ џџџ џџ џџџ џџ џџџ џџ џџџР џ џџџР џ џџџР џ џџџР џ џџџР џ џџџР џ џџџР џ џџџР џ џџџР џ џџџР џ џџџР џ џџџР џ џџџР џџ џџџ џџ џџџ џџ џџџ џџ џџџџџ џџџ џџ џџџ џџ џџџ џџ џџў џџ џџў џџ џџќ џџ џџќ џџ џџј џџ џџ№ ?џџ џр џџ ?џР џџџ џ џџџ ј џџџ џџџ џџџ р џџџџ ќ ?џџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџџ џџџџџџ џџџџџ џџџџџ џџџџџ џџџџџ џџџџџ EI Q endstream endobj 85 0 obj << /Length 406 >> stream 55 0 4 0 51 54 d1 q 47 0 0 54 4.1 -0.1 cm BI /W 47 /H 54 /BPC 1 /IM true ID џќџ № Р р Рќ Рџ ?џ џ џ џџ џџ џРџ џРџ џрџ џ№џ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџџ џџџ џџ џџ џџ џџ џџ EI Q endstream endobj 86 0 obj << /Length 419 >> stream 53 0 4 -1 48 55 d1 q 44 0 0 56 4.1 -1.1 cm BI /W 44 /H 56 /BPC 1 /IM true ID џќ №џџР рџџ џќ џј џР џ№џј џрџў џР?џџ џРџџџџџџџџџРџџџџРџ џџџрџ џџџрџ џџрџ џџрџ ?џџрџ џџџџ џџџџ ?џџџ џџџ џџР џџР ?џр џ№ џј џќ џџ џџР џ№ ?џџ ?џџј џџџР џџџј џџџў џџџџџџРџџџрџџџрџџџ№џџџ№џџџ№џџџ№ џџџ№ џџр џџр? ?џџр? џџР џџџ џўџ ?№џ џр џј џџ џџ EI Q endstream endobj 87 0 obj << /Length 545 >> stream 52 0 2 -1 44 76 d1 q 42 0 0 77 2.1 -1.1 cm BI /W 42 /H 77 /BPC 1 /IM true ID џџСџџџџџСџџџџџСџџџџџСџџџџџСџџџџџСџџџџџџџџџџџџџџџџџџџџџџџџџџџџџџџџџџўџџџџўџџџџўџџџџќџџџџјџџџџјџџџџ№џџџџрџџџџРџџџџ џџџў џџџ№ џ џ џ џ џџРџџџџРџџџџРџџџџРџџџџРџџџџРџџџџРџџџџРџџџџРџџџџРџџџџРџџџџРџџџџРџџџџРџџџџРџџџџРџџџџРџџџџРџџџџРџџџџРџџџџРџџџџРџџџџРџџџџРџџџџРџџџџРџџџџРџџџџРџј?џРџј?џРџј?џРџј?џРџј?џРџј?џРџј?џРџј?џРџј?џРџј?џРџј?џрџ№џр џ№џр џ№џ№ џрџџ№ рџџј ?Сџџќ џџў џџџ џџџр џџџќ џ EI Q endstream endobj 88 0 obj << /Length 578 >> stream 75 0 5 -1 71 54 d1 q 66 0 0 55 5.1 -1.1 cm BI /W 66 /H 55 /BPC 1 /IM true ID џРџџў ?џ џј ?џ џј ?џ џј ?џ џј ?џ џј ?џќ џџр ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџј ?џџ џџ№ ?џџ џџ№ ?џџ џџ№ ?џџ џџр ?џџ џџр ?џџџџР ?џџџџФ ?џџџџ ?џџРџџ ?џџРџў џџрџј<