hashing: types of hashing
Hashing is a signature for a file or password
Popular algorithm mostly used today. for example,
- blowfish algorithm
- md5 algorithm
- sha256, sha1 algorithm
categories of hashing algorithm
firstly, let briefly discuss in two aspect what it is all about i.e the field in which it is employed are password and document hashing
Document hashing
Firstly, I would love to explain in brief, what is document hashing and how does it work.
File verification: to clarify or to check if the file or document have been tampered with. Moreover, a file will always have the same hash over and over again. So what are the benefit
Benefit of document hashing
Protection against malware firstly, You can use the hash algorithm to detect if a file have injected with any malicious program. for example, MR A download a file with hash value of "k334fdf4f44f345445". by the time, he checked. he found out that they hashed does not match with the files hash, which means that the data in the file have been affected with malware program
password hashing
To begin with, password hashing is one of the best way in making password secure. but on the other hand, it reliable and safe. many website don't store user password in plaintext, not anymore. because of brute force attack. but how do they know it is your password when password are not even store in plaintext form. but to cut the long story short it not quite hard. the main reason i.e the logic behind it is so simple which is that every text would have the shame hash value over and over again no matter the number of time you tried to hashed it, it would still return the same value.
pw= get_input("enter your password)
salt=some_rand()
pw = pw+salt
hashed_pw = hash(pw)
database.savepass(hashed_pw, salt)
Problems that occurr
let say for example two users using the same password on a single website would have the same hashed to be stored in the database. Due to this reason many passwords can be accessible to hacker for them to do their daily job. Therefore, salting is the process or way of solving this problem.
salting
Salting simply means addition of any random text, number to a password before it is hashed and stored into the database
Comments
Post a Comment