Bcrypt & Password Security - An Introduction

Показать описание

A conceptual introduction to bcrypt and why it's useful in the context of user password security.

MakerSquare is a three-month full-time career accelerator for software engineering. By teaching computer science fundamentals and modern web languages like JavaScript, we prepare students to join top flight engineering teams.

Рекомендации по теме

Комментарии

nice video, and also hello fellow mangadex users.

nyzss

Views are gonna go stonks, now that mangadex promoted it

swarnavopurkayastha

whew, im safe. my password is way too weeb to be in any dictionary.

mvtxbbt

This was actually really interesting. Thanks mangadex 😂

aminakay

Came because of mangadex, stayed because of the easy to understand explanations. I can foresee myself coming to this channel a lot 😲

rierier

i get none of this but i feel safer now thanks mangadex

man_lady

Nice explanation of password hashing and salts, but I have to admit I came here looking for an explanation of bcrypt specifically.

kennethjor

A dictionary attack is specifically a brute force attack using dictionary terms. A look up table of hashes is know as a rainbow table. Some rainbow tables are produced using a dictionary attack. A salt should be unique to each user. Salts make it hard to produce a rainbow tables because you would have to create a different rainbow table for every possible salt. So it's every possible password times every possible salt.

PantsStatusZero

Thanks for the video and i want to thank MangaDex team for introducing me to this channel

kurama

Cartoon > Animation > Anime > OPM > Mangadex > Hack Reactor
Great Journey so far, learned a lot.

ashwanishahrawat

Thanks for this video. I finally understood how bcrypt works, especially the part about salts. One of the main advantages of bcrypt is that it cannot go obsolete as computers become faster because you just have to increase the number of rounds of hashing.
When first released in 1999, the recommended number of rounds was 2^6...not you should use 2^15 for increased security.

daniel....

I just wanted a site to read some manga, how did I get here lmao

IsaacFoster..

Something he didn't mention is that you typically generate a salt _per password_. That means that generating the hash dictionary (or "rainbow table" as they're typically called) is impossible to generate in the first place.
This means that cracking each password is _even slower_ because two users who have the same password, will have different password digests, because they have different salts

SirLightfire