Need the below questions answered:  1) Suppose that a merchant’s website stores hashed passwords that have not been salted. Describe an attack to obtain passwords that could be prevented using salted passwords. (Remember, hashes cannot be "decrypted")   2) You know that it is generally not a good practice to create your own authentication systems when standard packages are available to you. But for the purposes of learning, you are doing it anyway. You are trying to decide which hashing algorithm to use when salting and hashing user passwords for the webapp you are building. Of the following hashing algorithms, which is best for hashing passwords? What makes your choice the best option for this scenario? SHA512 MD5 Bcrypt SHA256 3) There are several options for password hashing algorithms other than your choice from above. Do a little Internet investigation and discuss an equivalent or better option than your previous choice. Are there any parameters or settings to that algorithm that impact its security?

Database System Concepts
7th Edition
ISBN:9780078022159
Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan
Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan
Chapter1: Introduction
Section: Chapter Questions
Problem 1PE
icon
Related questions
Question

Need the below questions answered: 

1) Suppose that a merchant’s website stores hashed passwords that have not been salted. Describe an attack to obtain passwords that could be prevented using salted passwords. (Remember, hashes cannot be "decrypted")

 

2) You know that it is generally not a good practice to create your own authentication systems when standard packages are available to you. But for the purposes of learning, you are doing it anyway. You are trying to decide which hashing algorithm to use when salting and hashing user passwords for the webapp you are building. Of the following hashing algorithms, which is best for hashing passwords? What makes your choice the best option for this scenario?

  1. SHA512
  2. MD5
  3. Bcrypt
  4. SHA256

3) There are several options for password hashing algorithms other than your choice from above. Do a little Internet investigation and discuss an equivalent or better option than your previous choice. Are there any parameters or settings to that algorithm that impact its security?

Expert Solution
trending now

Trending now

This is a popular solution!

steps

Step by step

Solved in 4 steps

Blurred answer
Knowledge Booster
Encryption and Decryption
Learn more about
Need a deep-dive on the concept behind this application? Look no further. Learn more about this topic, computer-science and related others by exploring similar questions and additional content below.
Recommended textbooks for you
Database System Concepts
Database System Concepts
Computer Science
ISBN:
9780078022159
Author:
Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan
Publisher:
McGraw-Hill Education
Starting Out with Python (4th Edition)
Starting Out with Python (4th Edition)
Computer Science
ISBN:
9780134444321
Author:
Tony Gaddis
Publisher:
PEARSON
Digital Fundamentals (11th Edition)
Digital Fundamentals (11th Edition)
Computer Science
ISBN:
9780132737968
Author:
Thomas L. Floyd
Publisher:
PEARSON
C How to Program (8th Edition)
C How to Program (8th Edition)
Computer Science
ISBN:
9780133976892
Author:
Paul J. Deitel, Harvey Deitel
Publisher:
PEARSON
Database Systems: Design, Implementation, & Manag…
Database Systems: Design, Implementation, & Manag…
Computer Science
ISBN:
9781337627900
Author:
Carlos Coronel, Steven Morris
Publisher:
Cengage Learning
Programmable Logic Controllers
Programmable Logic Controllers
Computer Science
ISBN:
9780073373843
Author:
Frank D. Petruzella
Publisher:
McGraw-Hill Education