Usarega zita ravo rakanaka richikunyengera iwe, zvinhu izvi zvinotyisa.
Apo iwe unogona kufunga nezveWorldbow Tables sezvakawanda zvine mifananidzo yakaisvonaka, iyo haisi iyo yatinozozokurukura. Rainbow Tables yatinenge tichitaura inoshandiswa kuparadzanisa passwords uye inoshandiswa zvakare mune zvombo zvinowedzera kukura.
Chii chaanenge ari Rainbow Tables? Ko chimwe chinhu chine zita rakanaka uye rakanyanyisa rakadaro rakaipa sei?
Icho Chinhu Chakakosha Pamusana Wemvura Yakasara
Ndiri munhu akaipa uyo achangobva kuvhara chigunha chechigamba muvhareji kana kushanda, akachigadzirisa zvakare, ndokumhanya purogiramu iyo inonyanya kuchengetedza database yefaira ine mazita emashandisi nemapepwords pasi pamiviri yangu.
Mafairaji ari mufaira ari encrypted saka handigone kuaverenga. Ini ndichafanirwa kuputsa mapepawedi mufaira (kana kuti pasi pemutungamiri password) kuitira kuti ini ndivashandise kuti vasvike purogiramu.
Ndezvipi zvinoshandiswa pakutsvaga passwords? Ndinogona kuedza uye kushandisa hurongwa hwekunyengera kwepasipoti-simba sezvakaita John the Ripper, iyo inobvisa pa password password, ichiedza kuchinjazve maonero ega ega kusanganiswa kwephasiwedi. Chechipiri chisarudzo ndechokuisa dhiyabhorosi kudonhedzera duramazwi rine mazana ezviuru zvepaswedi dzinowanzoshandiswa uye ona kana ichiwana chero hits. Iyi nzira inogona kutora mavhiki, mwedzi, kana kunyange makore kana mapepawedi ari akakwana zvakakwana.
Kana password iri "kuedzwa" pamusoro pechirongwa "yakashata" uchishandisa encryption kuitira kuti password chaiyo isambotumirwa mumashoko akajeka mukati memutsara wekutaurirana. Izvi zvinodzivirira vavesdroppers kubva pakurambidza password. Ita yezwi rinowanzoonekwa seboka remarara uye inowanzosiyana yakasiyana neshoko rekutanga. Purogiramu yako inogona kuva "shitzu" asi hana ye password yako inogona kutarisa chimwe chinhu se "7378347eedbfdd761619451949225ec1".
Kuti uone vashandisi, hurongwa hunotora huwandu hwehuwandu hwakagadzirwa ne password password yehutori pamakombiyuta ekombiyuta uye unohuenzanisa nehuwandu hwehwu hwakachengetwa patafura pavhavha. Kana mahedheni akaenzana, ipapo mutengi akavimbiswa uye anopiwa kuwanikwa.
Hashing password ndiyo nzira 1 yekuita, zvinoreva kuti haugoni kubvisa chirevo chekuona kuti chii chinyorwa chakajeka che password. Hapana chiyiko chekuti chibvumirane nehah kana yakasikwa. Hapana "chindori chinyorwa" kana iwe uchida.
Purogiramu dzekunyora kwepachivande dzinoshanda nenzira yakafanana neyokugadzirira. Purogiramu inokanganisa inotanga nokutora mapepa ekuputika, inovashandisa kuburikidza nehah algorithm, yakadai se MD5, uye zvino inofanidza kubudiswa kwehhh uye inoshandiswa mune yebiro password password. Kana ikawana mutsara ipapo purogiramu yakanganisa password. Sezvatareva kare, izvi zvinogona kutora nguva refu.
Pinda Rainbow Tables
Rainbow Tables inonyanya masheji makuru ematafura akafanirwa mberi akazara nemafungiro aah has pre-matched to possible passintext passwords. Muraravheti Tables zvinowanzobvumira vaseki kuti vadzose basa rekushanda kuti vaone kuti zita repazwi rinogona kunge rakadini. Zvinokwanisika kuti mapepa maviri akasiyana akwanise kuunza zvakafanana zvakafanana naizvozvo hazvina kukosha kuziva icho chinyorwa chepakutanga chaiva chei, chero bedzi chiine maitiro akafanana. Izwi rechirevo chekutsvaga haringatombove rakafanana neshoko rakasikwa nemushandisi, asi chero bedzi inha yakafananidzwa, saka hazvina basa kuti izwi rekutanga raiva chii.
Kushandiswa kweWorldbow Tables kunobvumira mapepaji kuti aparadzwe munguva shoma shoma kana achienzaniswa nemaitiro-masimba, asi, kutengeswa ndeyekuti zvinotora zvakawanda zvekuchengetedza (dzimwe nguva Terabytes) kubata Rainbow Tables ivo pachavo, Kuchengetedza mazuva ano yakawanda uye inotengeswa kuitira kuti basa iri rive risina basa guru sezvarakanga riri makore gumi apfuura apo dhiabyte inotya yakanga isiri chinhu chaunogona kutora kuGood Buy.
Vatengesi vanogona kutenga Rainbow Tables precomputed for cracking passwords yezvinhu zvinotambura zvinoshandiswa zvakadai seWindows XP, Vista, Windows 7, uye maitiro anoshandisa MD5 neSHA1 sezvo password yavo ishing mechanism (vakawanda vashandisi vekushanda kwewebhu vanogadzirisa maitiro aya).
Nzira Yokuzvidzivirira Sei Pamusana Wemiraraji Tables-Based Based Password
Tinoshuva kuti pane mazano ari nani pane uyu kune vose. Tinoda kutaura kuti password yakasimba ingabatsira, asi izvi hazvisi zvechokwadi nokuti haisi utera hwephasiwedi ndiyo dambudziko, ndiko kushaya simba kunobatanidza ne hashing basa iri kushandiswa kunyora pasi password.
Zano rakanakisisa ratinogona kupa vashandisi ndekugara kure nemakombiyuta mapurogiramu anoita kuti password yako ive yakareba kusvika pane zvishomanana zvevanhu. Ichi chiratidzo chaicho chekushungurudzika kwekare-chikoro chechigwaro chekugadzirisa purogiramu. Kuwedzerwa kwehutsi hwehutsi uye kusagadzikana kunogona kubatsira zvishoma, asi haisi fimbo yakachengeteka yekudzivirirwa. Iyo yakareba password yako, yakawanda Rainbow Tables inofanirwa kunge iri kupedzisa, asi muchengeti ane zvakawanda zvakawanda anogona kugona kuita izvi.
Zano redu rekudzivirirwa kunopikisana neMvura Rainbow Tables chaizvoizvo rinoreva vashandisi vekushanda uye hurongwa hwevatongi. Iyo iri pamiganhu yepamusoro apo inouya pakudzivirira vashandisi kurwisa rudzi urwu rwokurwisa.
Pano pane mamwe mazano ekugadzirisa pakudzivirira pamusoro pe Rainbow Table kurwisa:
- Usashandisa MD5 kana SHA1 mu password yako hashing basa. MD5 uye SHA1 dzakapedzisira kushandiswa kwepa password hashing algorithms uye matafura akawanda emvura ekuputika anoshandiswa kuparadzanisa passwords anovakirwa kunyoresa zvishandiso uye hurongwa hunoshandisa nzira idzi. Funga kushandisa dzimwe nzira dzemazuva ano shanduro seSHA2.
- Shandisa izwi re "Salt" muzwi rako rekushandiswa. Kuwedzera Cryptographic Munyu kune password yako hashing basa inobatsira kudzivirira kushandiswa kwe Rainbow Tables kushandiswa kuparadzanisa passwords mumushandisi wako. Kuona mienzaniso yekunyoresa yekuti ungashandisa sei mhedziso yekristptographic kuti ubatsire "Rainbow-Proof" yako yekushanda chinyorwa chinyatsoongorora webMasters By Design Design iyo ine nyaya yakanaka pamusoro pehurukuro.
Kana iwe uchida kuona kuti vatengesi vanoita sei kushandiswa kwephasiwedi vachishandisa Rainbow Tables, unogona kuverenga nyaya inoyevedza pamusoro pokuti ungashandisa sei nzira idzi kuti uwanezve mapepa ako epasepa.