Security of Password Hashing in Cloud

• 作者: Parves Kamal
• 来源期刊: 信息安全(英文)
• 学科: 工学
• 关键词: Index Terms-Hash Collision GPGPU CUDA OPENCL
• 年，卷（期）: 2019,（2）
• 页码范围: 45-68
• 页数: 24页
• 分类号: TP3

摘要

Though the History of using password in computing can be traced back to as far as mid of last century little focus has been implied on how to securely store and retrieve password to authenticate and authorize services to the end users. In this paper the current security of various password hashing schemes that are in use today will be investigated through practical proof of concept-GPU based, password hash dump cracking using the power of cloud computing. We will be providing comparison on different password hashing cracking time using the cloud GPU power in AWS. The focus of this paper is to show the possible use of cloud computing in cracking hash dumps and the way to countermeasures them by using secure hashing algorithm and using complex passwords.