The password security analysis of network forums

摘要

In this paper, we analyze the password security of two popular network forums under the circumstances of both server and cookie encryption. Firstly, we investigate the inner encryption principles for user's password in each forum including cryptographic algorithms, key derivation ways and encrypted storage. Besides, we evaluate and compare the password security level according to password recovery ability nowadays. In order to enhance the security of forum users' passwords, we also give some pieces of suggestion with respect to concrete implementation way of encryption algorithms and strategy of password choice.