We’re rewarding the question askers & reputations are being recalculated! Read more.
2 deleted 6 characters in body; edited title
source | link

what role do hashes play in encyptedencrypted containers?

So I know that hashes are used to bring the plaintext Passwordpassword in the right lenthlength for the encryption algorythmalgorithm key  . But is the password hash storestores outside the encrypted container to validate the password  ? If so isn´t this a security vulnerability  ? Instead of attacking the encryption the attacker could just crack the hash  . Is that how tools like rar2john or zip2john work  ? If

If not how do they work  , and why is the hash stored on the outside of the encrypted container  ?

what role do hashes play in encypted containers?

So I know that hashes are used to bring the plaintext Password in the right lenth for the encryption algorythm key  . But is the password hash store outside the encrypted container to validate the password  ? If so isn´t this a security vulnerability  ? Instead of attacking the encryption the attacker could just crack the hash  . Is that how tools like rar2john or zip2john work  ? If not how do they work  , and why is the hash stored on the outside of the encrypted container  ?

what role do hashes play in encrypted containers?

I know that hashes are used to bring the plaintext password in the right length for the encryption algorithm key. But is the password hash stores outside the encrypted container to validate the password? If so isn´t this a security vulnerability? Instead of attacking the encryption the attacker could just crack the hash. Is that how tools like rar2john or zip2john work?

If not how do they work, and why is the hash stored on the outside of the encrypted container?

    Tweeted twitter.com/StackSecurity/status/844470926745964544
1
source | link

what role do hashes play in encypted containers?

So I know that hashes are used to bring the plaintext Password in the right lenth for the encryption algorythm key . But is the password hash store outside the encrypted container to validate the password ? If so isn´t this a security vulnerability ? Instead of attacking the encryption the attacker could just crack the hash . Is that how tools like rar2john or zip2john work ? If not how do they work , and why is the hash stored on the outside of the encrypted container ?