Hashing Attacks Flashcards
1
Q
What are the two hashing attacks?
A
Pass the Hash
Birthday Attack
2
Q
What is a pass the hash attack?
A
When an attacker gains the hash of a users password. They take the hash and input it as the password and successfully login.
3
Q
What is a birthday attack?
A
When two different inputs create the same hash. Essentially the wrong password becomes the right password.
4
Q
How do you increase the strength of a hash?
A
Key stretching, Salting, and Nonces
5
Q
What is key stretching?
A
Essentially, you talk a weak hash, and run it through a stronger hash to create a 128-bit hash.
6
Q
What is salting?
A
Adding random inputs (filler) to extend the password before you put it through a hash.
7
Q
What is a nonce?
A
A psuedo-random number is added to the password before you hash it.
