I've understood that the following steps are taken when I log in to a site: 1. My password is hashed 2. The hash is compared to what's stored in the database. 3. If the hashes are equal, I can log in. ...
Hashing / How easy is it to infer the original input if the a slight variation of the input, the hash result and the hashing algorithms are known [duplicate]
Given that I have an initial input that is publicly known (e.g. "ABCDEFGHIJ") a slight variation of (1) (e.g. "BACDEFGHIJ") that is used as the input to a hashing algorithm (3) an modern one-way ...
How does an attacker authenticate to a service using just the hash of the user (after performing a pth attack)
Let's say the attacker got the username and the password's hash. How can he use it when authenticating to some service in its domain with NTLM , for example? How can he send the request as the ...
I know that a hash is a one-way-function and that therefore there isn't a reversal function. By reversing a hash I just mean to find some plaintext that gives the hash. I think that I understand that ...
Storing the hash of users' passwords, e.g. in a database, is insecure since human passwords are vulnerable to dictionary attacks. Everyone suggests that this is mitigated via the use of salts, but the ...
Is there any collision rate measure for popular hashing algorithms (md5, crc32, sha-*)? If that depends only from output size, it's quite trivial to measure, but I suppose that depends also of ...
Where can I find one? Is there a pot of gold at the end? How do I protect against them? From the Area51 proposal This question was IT Security Question of the Week. Read the Sep 09, 2011 blog ...