Question: ) Using salted Hash is to make attackers work more expensive . There are other ways to achieve the same goal. For example, instead of

) Using salted Hash is to make attackers work more expensive. There are other ways to achieve the same goal. For example, instead of storing Hash(password), the system stores Hash10000(password). For a user who entered his/her password, the system will Hash the password 10000 times and see if the final result matches the stored one. Meanwhile, an attacker who wants to build a rainbow table will also spend 10000 times than if Hash(password) is stored.
While doing this indeed slows down the attackers offline password guessing attempt, it also significantly increases the servers effort. Suppose the server still stores Hash10000(password), but when Alice logs in, her client machine first computes Hash9999(password) and sends that to the server.
a. Will there still be the advantage gained by storing Hash10000(password)?
b. Will this save the server computation?
To answer both questions, first clearly give a Yes/No, and then use a few sentences to explain why you make this conclusion.

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!