Are hashed and salted passwords secure against dictionary attacks?

后端 未结 5 1622
长发绾君心
长发绾君心 2021-01-17 23:24

I understand that salts make the same password hash to different values. However, salts are usually stored in the database with the password. So let\'s say I am attacker,

5条回答
  •  情话喂你
    2021-01-18 00:25

    Salt doesn't prevent dictionary attacks, just precalculated dictionary attacks. In particular, it protects against rainbow tables (http://en.wikipedia.org/wiki/Rainbow_table) and also ensures that cracking one user's password doesn't automatically let you crack any user who shares that password.

    The article I linked to mentions some ways to improve upon salting, incudling key strengthening (http://en.wikipedia.org/wiki/Key_strengthening).

提交回复
热议问题