Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [rainbow-table]

The tag has no usage guidance.

0
votes
1answer
83 views

Iterated SHA1 hashing and the effect on rainbow table computation

Scenario: 1000 distinct keys are each prefixed with the same salt, and SHA1 hashed. The hash output is then iteratively SHA1 hashed x times. Let's start with x is 100. The specification of the keys ...
2
votes
2answers
81 views

To build a rainbow table, how to decide size of chain and number of lines?

To be sure I well understood the Rainbow Tables, I've decided to make a little project in Java, but I"m stuck on a question : how to choose the size of the chain ? And this will give the number of ...
0
votes
2answers
2k views

Cracking passwords via hashcat or rainbow tables. Which is faster?

This is more of a theoretical rather than a practical question. To give a bit of background, the discussion at work has come up with what to set our password complexity to and what the logistics would ...
2
votes
1answer
116 views

clarification on how rainbow tables use multiple reduction functions to avoid collisions

I understand how Hellman's time-memory trade-off tables work by creating chains of hash and reduction function results and storing the last result after a number of operations. since the reduction ...
3
votes
2answers
2k views

Should I use rainbow tables or bruteforce (NTLM)?

As part of security testing, I will receive around 150 to 200 Active Directory password hashes from Windows Server 2012 R2 (using NTLM?). I have found NTLM rainbow tables (1,5 TB total), that covers ...
7
votes
4answers
2k views

Is there a way to check lists of cracked passwords without revealing my password?

I want check if my various passwords are in lists of cracked passwords, but I don't want to type the passwords online. For example, I'd rather scroll through an ordered list of passwords that have ...
5
votes
2answers
135 views

Are stronger passwords safe in case of a breach?

Passwords are not generally held by websites, instead, they hold hashes of your passwords. When there's a breach, these hashes are stolen and they are matched against rainbow tables of pre generated ...
1
vote
3answers
587 views

By how much does the addition of a salt slow down a rainbow table attack?

I understand that the addition of a salt provides some protection, because the attacker can no longer just look up the hash value in a rainbow table. However, it is still feasible to write a cracking ...
2
votes
1answer
203 views

How many combinations of md5sums can be computed from a call to random() in PostgreSQL?

Problem space I'm way out of my pay grade, I'm trying to figure out How much randomness does a call to random() actually provide in PostgreSQL? SELECT random(); Whether or not you can reasonably ...
1
vote
0answers
168 views

Generating Rainbow Tables with Salt/Prefix [closed]

I would need a tool that would allow me to create rainbow table for custom password pattern. The pattern is 9-XXXXXXXXX where X is alphanumberic character and 9- is fixed prefix, as well as fixed ...
1
vote
1answer
271 views

Can a Rainbow Table find multiple plaintext passwords to match a given hash

Given that: an MD5 hash can map to multiple plaintext strings (it is not unique) a rainbow table may store several million plaintext passwords with matching hash MY password is "password123", mapping ...
0
votes
0answers
1k views

Rainbow Tables RTGen how to change command to make password cracking length longer

I am attempting to crack the 10 lettered NTLM hash B733FF02AF1766FBC90D8E4B3959EA18 with rainbowcrack (which translates to hello123hi). I have already generated a plaintext 4-7 loweralpha-numeric ...
0
votes
2answers
67 views

Does this count as unique salting against rainbow tables

**Due to the limitations of my situation the exe (i.e. source), hash, salt, everything is stored locally as it's a local application. Would this idea beat rainbow tables? Password = Input (always 8 ...
2
votes
3answers
4k views

Are rainbow tables a viable tool for cracking NTLMv2 hashes?

Background I am unclear about the difference between NTLM hashes and the NTLM protocol, regardless of version. My tentative understanding is that there is such a thing as an "NTLMv2 hash", and that ...
9
votes
2answers
3k views

Does Rainbow Table Not Require Decompression?

I understand that a rainbow table solves the storage problem when one attacks a password using precomputed hashes. However, since rainbow tables are essentially a compressed version of the hashes--...
0
votes
5answers
1k views

Why can salts be public? [duplicate]

From what I understand, salts are called "salts" rather than "keys" because they are allowed to be public. I understand that applying a random salt makes it difficult for rainbow table attacks because ...
2
votes
0answers
196 views

The optimal settings of Winrtgen GUI

I'm working with Winrtgen GUI on windows, but I can't fix the right settings to create a rainbow table for a: password length=1-7 Charset=alpha numeric all space What are the ideal values to put in ...
3
votes
4answers
315 views

Is knowing the salt a problem?

I understand that adding a salt would thwart the use of rainbow tables. I don't understand the time it would take to create a rainbow table for a certain salt and of course this is dependent on the ...
6
votes
1answer
833 views

How do rainbow tables solve collisions?

I get the gist of it. It's like a middle ground between brute force attack and lookup table, it stores the starting plaintext and ending hash for each chain where a chain is made by reduction and hash....
4
votes
1answer
904 views

RSA rainbow table

Wouldn't it be possible to create as many as possible key pairs for the RSA encryption and then determine from a public key which the corresponding private key is ?
29
votes
12answers
8k views

Could I recover the content of file from its checksum/hash?

Let's say I have a video file that is split into multiple parts. Each piece is 2 Megabytes. I also have a list of the *insert hash name here* for each piece and also for the full file. Now assume ...
4
votes
4answers
228 views

Must an encrypted hash value be bigger than the password it was generated from?

I was reading a book called Introduction to network security theory and practice, and I found the following paragraph: Rainbow Tables A rainbow table is a table of two columns constructed as ...
5
votes
2answers
790 views

Why not slightly modify an existing hashfunction to create your own? [duplicate]

I read this interesting question on why improvising your own Hash function out of existing hash functions is bad. However this is specifically focusing on 'mixing' existing hashfunctions. What if for ...
2
votes
2answers
452 views

Why can't a rainbow table attack identify and trash the salt?

Here's my understanding of a salted / hashed authentication scheme: string plaintextPass = Request.Form["password"]; string salt = UserRecordFromDb.Salt; string toHash = salt + plaintextPass; string ...
0
votes
1answer
103 views

Can you resalt hash/rainbow tables after finding the salt for something?

After a rainbow/hash table is salted, is it possible to resalt it after finding the correct salt instead of generating it all over again? If not, what is preventing you from doing so? How can you find ...
6
votes
1answer
21k views

Rainbow tables/hash tables versus WPA/WPA2

In Wi-Fi penetration testing, is it possible to use rainbow tables/hash tables on WPA/WPA2 networks? Is there an advantage of one over the other? ...
6
votes
1answer
3k views

What is the difference between a hash table and a rainbow table, and how are they both used?

Is there much of a difference between the two tables? Can you get one from the other? (i.e. hash -> rainbow) How do they work? Are there different variables (in reference to speed, strength, resources,...
13
votes
1answer
680 views

Naive implementation of Rainbow Table and/or Hellman's trade-off

This question is the same one I asked here. Since I haven't got any response or even a comment I will post it here as well. Is there any naive implementation of Hellman's cryptanalytic time memory ...
0
votes
1answer
2k views

rainbow table for AES 256 CBC knowing IV, cipher text and plain text

I'm in a situation where I know that I have to decrypt a file encrypted using AES 256 CBC and I've the following details: I know the first 16 bytes block in plain text I know the IV (static 128 bit ...
1
vote
1answer
916 views

What does the SSID have to do with a networks security concerning rainbow tables?

I have noticed in a few places people mention that if a popular SSID is used, it makes a network more vulnerable to rainbow table attacks. I saw this in one location and assumed they'd mistakenly used ...
5
votes
1answer
13k views

WPA/WPA2 attacks

How does someone attack a WPA/WPA2 wireless network? I have read on the two main approaches: dictionary and rainbow tables. How do you use rainbow tables in conjunction with your tool of choice? I ...
1
vote
0answers
372 views

Can't see advantages of rainbow tables over hash tables [closed]

I've read about rainbow tables (which I've confused with hash tables at first). I understand that it uses a reduce function R(x) and by saving start value P(plaintext) and ending hashed value H I can '...
40
votes
6answers
23k views

Length of passwords that are rainbow table safe

With large computing power (like what you can get in the Amazon cloud for example) you can generate huge rainbow tables for passwords. There also seems to be some large rainbow tables reachable that ...
0
votes
2answers
3k views

Can NSA generate all hashes for rainbow table to break md5?

I was wondering about md5 encryption. It is good, and I agree that it is unbreakable. But this is why we have rainbow tables. What if bunch of people gather together and start brute forcing and ...
-4
votes
1answer
348 views

How many possible symbols and punctuations in a password? [closed]

I want to compute the possible combinations of a password consists of 8 digits of: alphabetical letters (26), numbers (0-9), symbols and punctuations. In order to compute this, I have to know the ...
241
votes
8answers
69k views

Why are salted hashes more secure for password storage?

I know there are many discussions on salted hashes, and I understand that the purpose is to make it impossible to build a rainbow table of all possible hashes (generally up to 7 characters). My ...
1
vote
0answers
155 views

Rainbow Tables: Why do we need to store the last value of a chain?

Surely we could just make it so a rainbow table says for each beginning of chain do 10k iterations, and then we wouldn't have to store both values? Or does by doing it this way stop collisions?
4
votes
3answers
4k views

Time Memory Trade-Off Attacks

Given, we want to crack a password. With Time Memory Trade-Off Attacks one tries to find the right balance between time to compute hashes for all possible passwords. And the used memory to store all ...
143
votes
3answers
60k views

What are rainbow tables and how are they used?

Where can I find one? Is there a pot of gold at the end? How do I protect against them? From the Area51 proposal This question was IT Security Question of the Week. Read the Sep 09, 2011 blog ...