Section 8.73 Increasing Hash Security

Question 1

Increasing Hash Security: Common Hashing Attacks

Pass the Hash Attack

Answer 1

A hacking technique that allows the attacker to authenticate to a remote server or service by using the underlying hash of a user’s password instead of requiring the associated plaintext password

Difficult to defend against due to various Windows vulnerabilities and applications

Question 2

Increasing Hash Security: Common Hashing Attacks

Birthday Attack

Answer 2

Occurs when two different messages result in the same hash digest (collision). Collisions in hashes can be exploited by attackers to bypass authentication systems

Use longer hash output (e.g., SHA-256) to reduce collisions and mitigate the attack

Question 3

Increasing Hash Security

Key Stretching

Answer 3

Technique that is used to mitigate a weaker key by creating longer, more secure keys (at least 128 bits).

○ Increases the time needed to crack the key

Used in systems like Wi-Fi Protected Access, Wi-Fi Protected Access version 2, and Pretty Good Privacy

Question 4

Increasing Hash Security

Salting

Answer 4

Adds random data (salt) to passwords before hashing. Ensures distinct hash outputs for the same password due to different salts

● Thwarts dictionary attacks, brute-force attacks, and rainbow tables

Question 5

Increasing Hash Security

Nonces (Number Used Once)

Answer 5

Adds unique, often random numbers to password-based authentication processes and prevents attackers from reusing stolen authentication data.

● Adds an extra layer of security against replay attacks

Question 6

Increasing Hash Security

Limiting Failed Login Attempts

Answer 6

● Restricts the number of incorrect login attempts a user can make

● Increases security by deterring attackers attempting to guess passwords

● Typically, lock the account after three incorrect attempts