Question: 1 . Suppose there are 1 0 0 0 users, and an attacker has a dictionary of 5 0 0 0 common passwords. An attacker

1. Suppose there are 1000 users, and an attacker has a dictionary of 5000 common passwords. An attacker has stolen the database of hashed passwords.
a. If the users password in the database were hashed without salt, how many Hash computation does the attacker need to find all users that have the passwords in the dictionary?
b. Calculate the number of Hash computations again, now assuming salt is used for the hash.
Show you computation steps and give necessary explanations to get full credit.
2.In class authentication, we explained storing Hash10000(password) as one way to make the guessing work expensive. While doing this indeed slows down the attackers offline password guessing attempt, it also significantly increases the servers effort. Suppose the server still stores Hash10000(password), but when Alice logs in, her client machine first computes Hash9999(password) and sends that to the server.
a. Will there still be the advantage gained by storing Hash10000(password)?
b. Will this save the server computation?
To answer both questions, first clearly give a Yes/No, and then use a few sentences to explain why you make this conclusion.

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!