![]() ![]() Second preimage resistance: If an input to a hash function is known, it should be hard to find another input that has the same hashed output.Ĭollision resistance: This says that it is hard to find any two inputs such that their hashed output is the same. For example, if I take a random SHA256 hash output ( string data type) like "401357cf18542b4117ca59800657b64cce2a36d8ad4c56b6102a1e0b03049e97", it should be very hard to know what the input to the hash function was that resulted in this output. Preimage resistance: Given the output of a hash function Out, it should be hard to find any input In, which when hashed, results in the same output ( hash(In) = Out). They are functions that have these properties: Lets take a look at hash functions in more detail What are hash functions? This is unlike encryption in which given the output and the encryption key, you can know the input. ![]() Hashing is a one way function which generates a bit string of a fixed size. Password hashing involves taking the plaintext password and passing it through a hashing function. This is where password hashing comes into play: What is Password Hashing? Using these keys, the attacker would be able to decrypt the encrypted passwords - making this method of storage weak. However, if the database is compromised, then the encryption keys would probably 1 be compromised as well. Using encryption may seem to be a good choice since the attacker would not know the actual passwords (because they are encrypted). This rules out storing passwords in plain text. The aim behind storing passwords securely is that even if the database containing them is compromised, the attacker can’t decipher any user’s actual password. To make matters worse, users tend to reuse passwords across services which makes storing them securely even more important. Storing passwords can be a nuance due to the liability of them being compromised. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |