Hashing values using salts and peppers
AssigneeHewlett Packard Enterprise Development LP
InventorsJoseph Wright, Chris Davenport, Andrew Cartes
Life of this patent
Estimating the term…
Abstract
In some examples, a management controller includes a communication interface to communicate with a computing device, where the management controller is separate from a processor of the computing device. The management controller includes a management processor to receive, from the computing device, a first hash value that is based on a first hash function applied on an input value and a salt, generate a second hash value based on applying a second hash function on the first hash value and a pepper, and send the second hash value to the computing device.
Claims20
A management controller comprising:
- a communication interface to communicate with a computing device, wherein the management controller is separate from a processor of the computing device;
- and
- a management processor to:
- receive, from the computing device, a first hash value that is based on a first hash function applied on an input value and a salt,
- generate a second hash value based on applying a second hash function on the first hash value and a pepper, and
- send the second hash value to the computing device.
A computing device comprising:
- a communication interface to communicate with a management controller;
- and
- a processor separate from the management controller and to:
- generate a first hash value that is based on a first hash function applied on an input value and a salt,
- send, to the management controller, the first hash value,
- receive, from the management controller, a second hash value based on applying a second hash function on the first hash value and a pepper, and
- use the second hash value in granting access to the computing device.
A method performed by a system comprising a baseboard management controller (BMC), comprising:
- receiving, from a computing device over a secure connection between the BMC and the computing device, a first hash value that is based on a first cryptographic hash function applied on a user credential and a salt, wherein the first hash value is received from the computing device as part of creating a user account to access the computing device;
- generating a second hash value based on applying a second cryptographic hash function on the first hash value and a pepper;
- and
- sending, over the secure connection, the second hash value to the computing device for storage at the computing device and for use in authorizing user access of the computing device.
Dependencies are inferred from the claim text.