Hash Functions 2

Hash Functions 2

Introduction
1. One way hash functions are easy to compute, but hard to reverse
  1. Brute force can be used against simple one-way hash functions
2. Sometimes they have no inverse at all
3. One way hash functions are usually a lot smaller than the origional input
4. Examples
  1. MD5
  2. MD4
  3. SHA
  4. RIPE-MD-60
Hashing
1. Hashing is used for hash tables data so that there is a direct relation to the data content and storage location
2. Instead of storing each data item in the next free memory location, it's data location is determined by a an algorithem that uses a key part of the data
3. We can then access that bit of data using it's key value alone
Simple hash function methods
1. Truncation
  1. Take a few of the first or last characters of the key as the hash code. Works well if the characters are well distributed
2. Mid-square
  1. The key is squared and the middle digits of the re sult are used as the hashed value
3. Folding
  1. the key is partitioned into several parts and the su m of the parts is used to produce the hash code
One-way hash functions
1. Simple hash functions cause collisions - where there is more than one hash keys resulting in the same index.
2. For security, we need unique keys to be generated. This is known as collision-free hashing
3. Needs to be easy to compute, but hard to inverse
Passwords
1. It is possible to extract authentication information from the target system
2. Plain text passwords should NEVER be stored
3. The same hashing function is used when the user logs in, and it is compared with the value in the database
4. If the files containing the hashed is stolen, the thief has not got the passwords, just the irreversable hashes
5. If the thief knows the length of password, then it is possible to crack. This can be made harder by adding a salt.
Hash Salt
1. Hash salt is additional data that is used as an additional input to a one-way hash function
2. Helps defend against dictionary attacks
3. A new salt is randomly generated for each password
4. Usually the the salt and the password are concatenated and processed with a cryptographic hash function
  1. The resulting output is then stored with the salt in the database
  2. These are used for storing nearly all user credentials

Siguiente

Descripción

Resumen del Recurso

Similar

	Creado por lissy93 hace casi 10 años