Lesson plan
Password cracking
In cryptanalysis and computer security, password cracking is the process of guessing passwords protecting a computer system. A common approach (brute-force attack) is to repeatedly try guesses for the password and to check them against an available cryptographic hash of the password. Another type of approach is password spraying, which is often automated and occurs slowly over time to remain undetected, using a list of common passwords. The purpose of password cracking might be to help a user recover a forgotten password (since installing an entirely new password would involve System Administration privileges), to gain unauthorized access to a system, or to act as a preventive measure whereby system administrators check for easily crackable passwords. On a file-by-file basis, password cracking is utilized to gain access to digital evidence to which a judge has allowed access when a particular file's permissions are restricted. Brute-force password guessing attacks against online systems are usually ineffective because systems are designed to lock accounts after a certain number of unsuccessful login attempts. Obtaining the cryptographic hash of the password makes it possible to perform an unlimited number of offline guesses. Hash files might be obtained by third parties by court-ordered access, or as part of an illegal data breach.…
Article summary
In cryptanalysis and computer security, password cracking is the process of guessing passwords protecting a computer system. A common approach (brute-force attack) is to repeatedly try guesses for the password and to check them against an available cryptographic hash of the password. Another type of approach is password spraying, which is often automated and occurs slowly over time to remain undetected, using a list of common passwords. The purpose of password cracking might be to help a user recover a forgotten password (since installing an entirely new password would involve System Administration privileges), to gain unauthorized access to a system, or to act as a preventive measure whereby system administrators check for easily crackable passwords. On a file-by-file basis, password cracking is utilized to gain access to digital evidence to which a judge has allowed access when a particular file's permissions are restricted. Brute-force password guessing attacks against online systems are usually ineffective because systems are designed to lock accounts after a certain number of unsuccessful login attempts. Obtaining the cryptographic hash of the password makes it possible to perform an unlimited number of offline guesses. Hash files might be obtained by third parties by court-ordered access, or as part of an illegal data breach.…
Key claims
No claims recorded.
Discussion questions
- Summarise the article in your own words. Which single claim would you verify first, and why?
- Which claim in this article is most likely to be revised as the sources update? How would you check its current status?
- If two sources disagreed about one of these facts, what would you need in order to trust one over the other?
Bibliography
No sources recorded.
Key claims and bibliography are generated from the same tracked claims and sources as the article page.