Cisco switches to weaker hashing scheme
Page 1 of 1
SpykeZ




Posts: 23710

PostPosted: Thu, 21st Mar 2013 01:02    Post subject: Cisco switches to weaker hashing scheme
Quote:

Password cracking experts have reversed a secret cryptographic formula recently added to Cisco devices. Ironically, the encryption type 4 algorithm leaves users considerably more susceptible to password cracking than an older alternative, even though the new routine was intended to enhance protections already in place.

It turns out that Cisco's new method for converting passwords into one-way hashes uses a single iteration of the SHA256 function with no cryptographic salt. The revelation came as a shock to many security experts because the technique requires little time and computing resources. As a result, relatively inexpensive computers used by crackers can try a dizzying number of guesses when attempting to guess the corresponding plain-text password. For instance, a system outfitted with two AMD Radeon 6990 graphics cards that run a soon-to-be-released version of the Hashcat password cracking program can cycle through more than 2.8 billion candidate passwords each second.


More at


Back to top
garus
VIP Member



Posts: 34197

PostPosted: Thu, 21st Mar 2013 11:08    Post subject:
snip
Back to top
Page 1 of 1 All times are GMT + 1 Hour
NFOHump.com Forum Index - Hardware Zone
Signature/Avatar nuking: none (can be changed in your profile)  


Display posts from previous:   

Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB 2.0.8 © 2001, 2002 phpBB Group