Data Security and Hashing Concepts

The video tutorial by Toby from Oine Security covers the concepts of hashing and salting, explaining their importance in data integrity and password security. It includes a practical demonstration of hashing files and verifying them using the NSRL database. The tutorial emphasizes the need for salting passwords to enhance security against brute force attacks and discusses the limitations of using MD5 due to potential collisions. The session concludes with a recap of the key points discussed.

What is the primary purpose of hashing in data security?

• To encrypt data

• To store data

• To compress data

• To validate data integrity

Why should passwords not be stored in clear text?

• To prevent unauthorized access

• To make them easier to remember

• To save storage space

• To comply with legal requirements

What command is used to list the contents of a directory in Linux?

• mv

• ls

• cp

• cd

Which command is used to copy files in Linux?

• ls

• rm

• cp

• mv

What is the bit length of the MD5 hashing algorithm?

• 64 bits

• 128 bits

• 256 bits

• 512 bits

Why are SHA hashes considered stronger than MD5 hashes?

• They are longer

• They are shorter

• They are more widely used

• They are easier to compute

What information can be used to search the NSRL database?

• File extension, file location, and last accessed date

• File name, product version, and hash value

• File path, file owner, and permissions

• File size, file type, and creation date

What is the purpose of adding a salt to a password?

• To make the password case-sensitive

• To make the password easier to remember

• To make the password shorter

• To increase resistance to brute force attacks

What is a collision in the context of hashing algorithms?

• When two different inputs produce the same hash output

• When a hash function fails to produce an output

• When a hash function produces a very short output

• When a hash function takes too long to compute

How does salting a password make it more secure?

• By converting the password to uppercase

• By adding random characters to the password before hashing

• By making the password longer

• By storing the password in multiple locations