Security Analysis of MD5 algorithm in Password Storage

摘要：

　　Hashing algorithms are commonly used to convert passwords into hashes which theoretically cannot be deciphered.This paper analyses the security risks of the hashing algorithm MD5 in password storage and discusses different solutions,such as salts and iterative hashing.We propose a new approach to using MD5 in password storage by using external information,a calculated salt and a random key to encrypt the password before the MD5 calculation.We suggest using key stretching to make the hash calculation slower and using XOR cipher to make the final hash value impossible to find in any standard rainbow table.

关键词： component MD5 Password Storage Security Data Security Dictionary attacks Rainbow Tables

作者: Mary Cindy Ah Kioon ZhaoShun Wang hubra Deb Das

作者单位: School of Computer and Communication Engineering University of Science and Technology(USTB), Beijing Beijing 100083, China

会议类型: 国际会议

会议名称: 2013 2nd International Symposium on Computer,Communication,Control and Automation(ISCCCA-13)(2013年第二届计算机、通信与自动化国际会议)

会议地点: 太原

会议语种:英文

页码: 706-709

在线出版日期: 2013-04-06（万方平台首次上网日期，不代表论文的发表时间）