Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 11 down vote favorite
5

Does anyone know of a well-known application that still uses unsalted hashes for password storage? I'm looking for an example for an upcoming lecture on Rainbow Tables, and I think it would add weight to the discussion if I had a real-world example that the students had perhaps heard of.

share|improve this question
I am very interested in this as well! Good research topic!!! – atdre Apr 9 '11 at 16:15
Isn't the NT hash used to store Windows passwords just unsalted MD4? – Richard Gadsden Jul 7 '11 at 17:18
1  
@Fixee That edit should have been an answer IMO – CodesInChaos Jun 7 '12 at 12:48
@CodeInChaos: Done. – Fixee Jun 7 '12 at 14:44

4 Answers

up vote 14 down vote accepted

Amazingly enough, MYSQL is a great current example. The recent hack of Oracle's mysql.com site (Irony: MySQL and Sun websites hacked using SQL injection - TNW Industry) exposed a bunch of unsalted hashes for important accounts, with high quality passwords like "qa" for three accounts (qa_r, qa_rw, and qa_adm), all of which hashed to "077f61a849269b62". They could be easily searched for on rainbow table sites like Passwords recovery - MD5, SHA1, MySQL.

Even the "new, improved" algorithm used since MYSQL 4.1.1 is simply an unsalted double application of the now-deprecated SHA-1 algorithm. See Simulating MySql's password() encryption using .NET or MS SQL - Stack Overflow. In the documentation for PASSWORD() they say you should not use it in your own applications. But the advice they give is terrible and they offer no excuse for why they don't simply migrate to a good algorithm with not only salts but also adaptive hashing like bcrypt or PBKDF2. Note that if you don't use an adaptive technique to iterate the hash, each salted hash is very vulnerable these days to fast cheap brute force attacks that can try billions of candidate passwords a second.

share|improve this answer
up vote 6 down vote

It was revealed in June 2012 that Linked-In (NYSE:LNKD) was using unsalted SHA1 hashes for its users' passwords. About 6.5 million passwords were leaked and thus far more than 3.4 million have been cracked.

share|improve this answer
up vote 5 down vote

phpbb, pretty well known forum software uses unsalted MD5...

Simple Machine Forums (SMF) uses unsalted SHA1

Or at least they were last time I checked...

share|improve this answer
Last forum I administrated (sometime last year) was a phpbb and it definitely had salted hashes then. – XQYZ Jun 8 '12 at 14:16
up vote 5 down vote

Wikipedia did not use a salt in the past. And even after they added the option to the software it took many month until it was enabled on wikipedia.org

share|improve this answer
Is this true of the open-source MediaWiki project, as well? I wonder which versions did not include salts. – atdre Apr 10 '11 at 0:00
It was around the time that "phase3" was given the name MediaWiki. But it took months (might be even two years) until that option was enabled on Wikipedia itself. – Hendrik Brummermann♦ Apr 10 '11 at 18:16

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.