Discover crack md5 password with salt, include the articles, news, trends, analysis and practical advice about crack md5 password with salt on alibabacloud.com
We know that if the password is hashed directly, then the hacker can get a hash value by obtaining this password, and then by checking the hash value dictionary (for example, MD5 password cracking site), the password of a user.Adding salt can solve
Transferred from: http://blog.csdn.net/blade2001/article/details/6341078We know that if the password is hashed directly, then the hacker can get a hash value by obtaining this password, and then by checking the hash value dictionary (for example, MD5
Currently, the MD5 password database has a huge amount of data, and most common passwords can reverse query the plaintext of the password through the MD5 Digest. To prevent internal personnel (persons who can access database or database backup files)
How to add salt?
In order to enhance the safety of MD5, in addition to the new algorithm to add a part of the value of salt, salt value is a randomly generated set of strings, can include random uppercase and lowercase letters, numbers, characters,
A simple md5 and salt encryption method (to prevent rainbow tables from hitting the database)
Md5 encryption (or digest algorithm) is not explained if you are familiar with it.
Currently, many database designs prefer to use one-way encryption to
MD5 encryption (or digest algorithm) Everyone is familiar with it, and it doesn't explain.Now a lot of database design like to use one-way encryption to save the password, verify that the password is encrypted once again to do a ciphertext
We know that if you hash the password directly, the hacker can get a user's password by getting the password hash value, and then by checking the hash value dictionary (such as MD5 password to crack the website).Adding salt can solve this problem to
Ask, I if this transcoding, is not security will be a little higher.
For example: SHA1 (MD5 ("password"))
What I want to know is:
1 is that necessary?
2 If this is possible, the impact on performance will be very large
or other what I can not think
Ask, If I transcode this way, is it more secure. For example: sha1 (md5 (password) I want to know: 1 is necessary. 2. if so, will it have a great impact on performance or what else I can't think, what problems may occur in the future, etc. I hope
(a) Why do I use hash functions to encrypt passwords
If you need to save a password (such as a website user's password), you should consider how to protect the password data, and it is extremely unsafe to write the password directly to the database
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.