Ch12 - 12.04 - Understanding Hashing

Question 1

Hashing Algorithms

Answer 1

1. Message Digest (MD)
2. Secure Hash Algorithm (SHA)
3. SHA-256 and SHA-512
4. LANMAN
5. NT LAN Manager (NTLM)
6. RACE Integrity Primitive Evaluation Message Digest
   (RIPEMD)
7. Hash-based Message Authentication Code (HMAC)

Question 2

Message Digest (MD)

Answer 2

The MD algorithm was created by Ron Rivest
and has different versions, such as MD2, MD4, and MD5. The MD5 algorithm is one of the most common hashing algorithms today. It generates a 128-bit hash value.

Question 3

Secure Hash Algorithm (SHA)

Answer 3

Created by the National Security Agency, the SHA algorithm has different versions, such as SHA-0, SHA-1, and SHA-2. The most common hashing protocol of the three in use today, SHA-1, creates a 160-bit hash value.

Question 4

SHA-256 and SHA-512

Answer 4

These are two newer versions of the SHA algorithm that generate 256-bit and 512-bit hash values. They are considered to not be susceptible to collision attacks.

Question 5

LANMAN

Answer 5

Also known as LM hash, this hashing algorithm is used by older Microsoft operating systems to hash and store the passwords. LM hash is created by encrypting the password with DES. It is considered an unsecure method of storing the password hashes.

Question 6

NT LAN Manager (NTLM)

Answer 6

Starting with Windows NT operating systems, a new and improved method of storing the passwords in the registry was used. The passwords are hashed with the NTLM, which uses MD4 instead of DES (used by LANMAN). NTLMv2 is a stronger authentication protocol than NTLM and uses HMAC-MD5 to hash the challenge and response between the client and the server.

Question 7

RACE Integrity Primitive Evaluation Message Digest (RIPEMD)

Answer 7

RIPEMD has many different versions of hashing levels, such as 128-bit, 160-bit, 256-bit, and 320-bit. The version is indicated in the name of the hashing algorithm, such as RIPEMD-160.

Question 8

Hash-based Message Authentication Code (HMAC)

Answer 8

HMAC involves using a secret key combined with the hashing algorithm to calculate the message authentication code (MAC). The MAC is the resulting hash value.