Explain the main advantages of adding a salt in password -based authentication system?
Explain the main advantages of adding a salt in password -based authentication system?
Homework Answers
Answer)
In the password -based authentication systems a salt is the cryptographic string which is randomly generated and appended to the password plain text before the hash function is applied. After applying the salt to the password the hash function converts the plain text to hash value. The salt is save to the database to the hashed password. During user authentication, the salt is retrieved from the user record and is then appended to the user entered password and the string is then hashed into memory and then compared to the saved database hash. Thus these are the advantages of adding a salt in password -based authentication system.
Add Answer to:
Explain the main advantages of adding a salt in password -based authentication system?
COSC 359 User Authentication Description A widely used password security technique is the use of hashed...
COSC 359
User Authentication
Description
A widely used password security technique is the use of hashed
passwords and a salt value. This scheme is found on virtually all
UNIX variants as well as on a number of other operating systems as
shown in Figure 3.1 bellow.
To load a new password into the system, the user selects or is
assigned a password. This password is combined with a fixed-length
salt value. In older implementations, this value is related to the...
To enable a password-based authentication of users, it has been decided to use one of the...
To enable a password-based authentication of users, it has been decided to use one of the following two approaches to store password information: 1. Store user name Uname next to the hash SHA-512 (passwordu) of the user password, using the hash function SHA-512. 2. Store the user name Uname along with a 64-bit random value ru and SHA-224 (passworddu{2 vertical lines}ru) using SHA -224. Which approach is preferable and why?
Single Sign-On has both advantages and disadvantages. The advantages of SSO include reduced password fatigue, reduced...
Single Sign-On has both advantages and disadvantages. The advantages of SSO include reduced password fatigue, reduced time entering credentials across multiple systems, reduced IT help desk costs from password reset and centralized auditing of authentication activity. The primary disadvantage is that the failure of security of the SSO credentials can result in the loss of the “keys to the kingdom” (that is, all of the user’s connected accounts). What is SSO? What are the advantages and disadvantages?
A. Briefly describe the autentication based on biometrics using four examples of biometric authentication technologies B....
A. Briefly describe the autentication based on biometrics using four examples of biometric authentication technologies B. Briefly describe the advantages and disadvantages of biometric system (4 marks)
Java Netbeans code Option 1: Authentication System For security-minded professionals, it is important that only the...
Java Netbeans code Option 1: Authentication System For security-minded professionals, it is important that only the appropriate people gain access to data in a computer system. This is called authentication. Once users gain entry, it is also important that they only see data related to their role in a computer system. This is called authorization. For the zoo, you will develop an authentication system that manages both authentication and authorization. You have been given a credentials file that contains credential...
Alice wants to evaluate a picture-based password system. The system has a database of 100 different...
Alice wants to evaluate a picture-based password system. The system has a database of 100 different pictures. To select a password, the user is allowed to browse through the database of pictures and select 20 pictures as their password. To authenticate, the user is presented with 20 challenges. Each challenge consists of 2 pictures displayed to the user: one is randomly chosen from the user's password set, and the other is randomly chosen from the remaining 80 pictures. The user...
Please explain some of the main advantages and disadvantages of using PM software?
Please explain some of the main advantages and disadvantages of using PM software?
What are the main potential advantages and disadvantages of using bioleaching based processes for dissolving metals...
What are the main potential advantages and disadvantages of using bioleaching based processes for dissolving metals from minerals compared to conventional chemical based processes?
Authentication Protocol: 3 Marks] Q4 (Authentication Protocol) The following mutual authentication protocol is proposed based on a symmetric-key cryptography algorithm. We assume that the cryptograph...
Authentication Protocol:
3 Marks] Q4 (Authentication Protocol) The following mutual authentication protocol is proposed based on a symmetric-key cryptography algorithm. We assume that the cryptography algorithm that is used here is secure. Given that the following protocol does not provide mutual authentication. Give two different attack scenarios where Trudy can convince Bob that she is Alice. Briefly explain each attack scenario performed by Trudy with proper diagram which on the protocol. "Alice",R E(R, KAB E(R+1, KAB) Alice Bob [Hints: You...
1. Explain the advantages of spread spectrum over narrowband transmissions. 2. Describe PLCP and PMD as...
1. Explain the advantages of spread spectrum over narrowband transmissions. 2. Describe PLCP and PMD as they relate to the OSI physical layer. 3. Describe the 3 different WLAN service sets. 4. List and describe the 3 main types of wireless MAC frames. 5. Explain the 3 major functions of the MAC layer with wireless LANs. 6. Differentiate between authentication and association. 7. Summarize how active and passive scanning differ.
COSC 359
User Authentication
Description
A widely used password security technique is the use of hashed
passwords and a salt value. This scheme is found on virtually all
UNIX variants as well as on a number of other operating systems as
shown in Figure 3.1 bellow.
To load a new password into the system, the user selects or is
assigned a password. This password is combined with a fixed-length
salt value. In older implementations, this value is related to the...
Alice wants to evaluate a picture-based password system. The system has a database of 100 different pictures. To select a password, the user is allowed to browse through the database of pictures and select 20 pictures as their password. To authenticate, the user is presented with 20 challenges. Each challenge consists of 2 pictures displayed to the user: one is randomly chosen from the user's password set, and the other is randomly chosen from the remaining 80 pictures. The user...
Authentication Protocol:
3 Marks] Q4 (Authentication Protocol) The following mutual authentication protocol is proposed based on a symmetric-key cryptography algorithm. We assume that the cryptography algorithm that is used here is secure. Given that the following protocol does not provide mutual authentication. Give two different attack scenarios where Trudy can convince Bob that she is Alice. Briefly explain each attack scenario performed by Trudy with proper diagram which on the protocol. "Alice",R E(R, KAB E(R+1, KAB) Alice Bob [Hints: You...
Most questions answered within 3 hours.
-
Where is the error in this code sequence?
String s1 = "Hello";
String s2 = "ello";...
asked 11 months ago -
Financial data for Joel de Paris, Inc., for last year
follow:
Joel de Paris, Inc.
Balance...
asked 11 months ago -
Consider this reaction:
Al2(SO4)3 (aq)+ BaCl3
(aq) Al2Cl6 (aq)- +
3BaSO4(s) . What is the...
asked 11 months ago -
Suppose that Savneet is considering increasing her
recent random sample from 20 car rentals to 40...
asked 11 months ago -
Trucks arrive at an unloading terminal at an average rate of 120
per hour.
Trucks arrive...
asked 11 months ago -
Why are methanol and ethanol completely soluble in water while
octanol is not very little soluble....
asked 11 months ago -
A facilities manager at a university reads in a research report
that the mean amount of...
asked 11 months ago -
When the CuSO4 is rehydrated by adding water to the anhydrous
compound, is this an endothermic...
asked 11 months ago -
A ray of sunlight is passing from diamond into crown glass; the
angle of incidence is...
asked 11 months ago -
A block of mass 0.249 kg is placed on top of a light, vertical
spring of...
asked 11 months ago -
how do the kidneys compensate in the presences of acidosis
a) trigger hyperventilate
b) reserve acid...
asked 11 months ago -
Question 501 pts
The rental rate of capital to the firm increases. Which of the
following...
asked 11 months ago