Web Security: Common Vulnerabilities And Their Mitigation - A little bit about hashing

The video tutorial covers the concept of hashing, explaining its characteristics and importance in data security. It discusses the properties of a good hash function, such as collision resistance and preimage resistance. Common hashing algorithms like MD5 and SHA are examined, highlighting their uses and vulnerabilities. The tutorial also explores various password attack methods, including dictionary attacks, brute force, and rainbow tables. Finally, it emphasizes the use of salting to enhance password security, making rainbow table attacks nearly impossible.

What is a key characteristic of a hash function?

• It should be easy to reverse engineer.

• It should produce a fixed-length output.

• It should require a lot of processing power.

• It should generate the same hash for different messages.

Which property ensures that two different messages do not produce the same hash?

• Second preimage resistance

• Encryption

• Preimage resistance

• Collision resistance

Why is MD5 considered cryptographically flawed?

• It is too slow.

• It is prone to collisions.

• It is not widely used.

• It is too complex.

What is a dictionary attack?

• Trying every possible combination of characters.

• Using a precomputed table to reverse hashes.

• Appending a salt to a password before hashing.

• Using a list of known passwords to find a match.

How can the difficulty of a brute force attack be increased?

• By using the same password across multiple sites.

• By using shorter passwords.

• By using a simpler hashing algorithm.

• By increasing the length of the password.

What is the primary purpose of a rainbow table?

• To generate random passwords.

• To store passwords securely.

• To precompute hashes for reversing hash functions.

• To encrypt messages.

How does salting enhance password security?

• By using a simpler hashing algorithm.

• By ensuring the same password produces different hashes.

• By storing passwords in plain text.

• By making passwords shorter.

What is a salted hash?

• A hash of the password only.

• A hash that is stored in plain text.

• A hash of the password with an appended value.

• A hash that is easy to reverse.

Why is it important to use different salts for different passwords?

• To simplify the hashing algorithm.

• To ensure the same password results in different hashes.

• To make the hashing process faster.

• To reduce the length of the password.

What is the main advantage of using a salt in password hashing?

• It makes the password easier to remember.

• It prevents the use of rainbow tables.

• It reduces the processing time.

• It allows for password recovery.