Dynamic Salt Generation and Placement for Secure Password Storing

摘要

Cryptographic hash functions such as MD5 and SHA-1 are the most popular functions used for storing passwords. The main problem is that they were not designed to serve such purpose. Therefore, using them for storing passwords has generated a vulnerability. An attack using a rainbow table is possible. In order to counter this type of attack, a salt value has been introduced. However, attaching a salt value to a password is still found not to be enough. This research, therefore, proposes a method that helps generate and place a salt value into a password dynamically. After the implementation and mathematical analysis, the results show that if our method is applied, passwords will become more tolerant to the attack, which makes it more difficult to compromise.