Home/ Questions/Q 741987
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-14T08:41:45+00:00

I recently obtained the l0pht-CD for windows and tried it out on my PC

  • 0

I recently obtained the l0pht-CD for windows and tried it out on my PC and It WORKS!!

2600hertz.wordpress.com/2009/12/22/100-windows-xp-vista-7-password-recovery

I’m designing a “Login-Simulator” that stores pwd-s in a similar manner. The current implementation will be vulnerable to the above attack. Plz could anyone illustrate (in as simple terms as possible), how to strengthen against such a rainbow tables attack.

MY GOAL : Build “Login-Simulator” to be as secure as possible. (Read Hacking Competition 😉 )

Thank You.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    You should use bcrypt, which has been designed by professional cryptographers to do exactly what you’re looking for.

    In general, you should never invent your own encryption / hashing schemes.
    Cryptography is extremely complicated, and you should stick to what has been proven to work.

    However, the basic answer to your question is to add a random per-user salt, and switch to a slower hash.

    • 0