[10] Assume passwords are 4 chars, 10 choices per character The legitimate user has 20 different...

Transcribed Image Text:

[10] Assume passwords are 4 chars, 10 choices per character The legitimate user has 20 different users' passwords stored in his device. Assume that the attacker has a dictionary that contains 100 possible passwords and corresponding precomputed hashed values. (assume that a random password in the dictionary file is 0.01) Please evaluate the attacker's work to crack the password by the number of hash operations does use salt 1. If the attacker wants to attack a specific user "Tom", how much work does the attacker need to do in theory and in practice, respectively? 2. If the attacker wants to attack either "Bob" or "Alice", how much work does the attacker need to do in theory and in practice, respectively? 3. If the attacker wants to attack any one of the 20 users, how much work does the attacker need to do in theory and in practice, respectively? [10] Assume passwords are 4 chars, 10 choices per character The legitimate user has 20 different users' passwords stored in his device. Assume that the attacker has a dictionary that contains 100 possible passwords and corresponding precomputed hashed values. (assume that a random password in the dictionary file is 0.01) Please evaluate the attacker's work to crack the password by the number of hash operations does use salt 1. If the attacker wants to attack a specific user "Tom", how much work does the attacker need to do in theory and in practice, respectively? 2. If the attacker wants to attack either "Bob" or "Alice", how much work does the attacker need to do in theory and in practice, respectively? 3. If the attacker wants to attack any one of the 20 users, how much work does the attacker need to do in theory and in practice, respectively?

Answer rating: 100% (QA)

To evaluate the attackers work to crack passwords we need to consider the number of possible combina... View the full answer