Skip to main content
Information Security

Return to Question

deleted 46 characters in body; edited title
Source Link
Anders
Anders
  • 65.8k
  • 25
  • 185
  • 226

How fast can be SHA-1 be brute forced when used with a secret?

In my code I calculate hashes for known codes and a secret with SHA-1:

  SHA-1(code + secret) = hash

A attacker can do statistical analysis on the database and for example guess that the code: 0322003220 produces a specific output.

  SHA-1(03220 + secret) = f24647f6573032838969db0934c63f6aa99c6173

The secret is 120 Bit long and for example in this example: Wqj5ASoan1iCjnjLeO6fLWqj5ASoan1iCjnjLeO6fL.

My question is how long it would take for an attacker to brute force the secret, when he knows the used code and output of the hash? My question is how long it would take for an attacker to brute force the secret, when he knows the used code and output of the hash? Is it secure? Thanks

How fast can be SHA-1 brute forced?

In my code I calculate hashes for known codes and a secret with SHA-1:

  SHA-1(code + secret) = hash

A attacker can do statistical analysis on the database and for example guess that the code: 03220 produces a specific output.

  SHA-1(03220 + secret) = f24647f6573032838969db0934c63f6aa99c6173

The secret is 120 Bit long and for example in this example: Wqj5ASoan1iCjnjLeO6fL

My question is how long it would take for an attacker to brute force the secret, when he knows the used code and output of the hash? Is it secure? Thanks

How fast can SHA-1 be brute forced when used with a secret?

In my code I calculate hashes for known codes and a secret with SHA-1:

SHA-1(code + secret) = hash

A attacker can do statistical analysis on the database and for example guess that the code 03220 produces a specific output.

SHA-1(03220 + secret) = f24647f6573032838969db0934c63f6aa99c6173

The secret is 120 Bit long and for example Wqj5ASoan1iCjnjLeO6fL.

My question is how long it would take for an attacker to brute force the secret, when he knows the used code and output of the hash? Is it secure?

Source Link
John Smith
John Smith
  • 225
  • 2
  • 7

How fast can be SHA-1 brute forced?

In my code I calculate hashes for known codes and a secret with SHA-1:

  SHA-1(code + secret) = hash

A attacker can do statistical analysis on the database and for example guess that the code: 03220 produces a specific output.

  SHA-1(03220 + secret) = f24647f6573032838969db0934c63f6aa99c6173

The secret is 120 Bit long and for example in this example: Wqj5ASoan1iCjnjLeO6fL

My question is how long it would take for an attacker to brute force the secret, when he knows the used code and output of the hash? Is it secure? Thanks