Wiki Article · Cinematic

Copyright (c) A|iens. All rights reserved.

============================================================================ Article Name :…

Overview

Copyright (c) A|iens. All rights reserved. — Quick Facts

📌

Property: Detail

🎯

Full Name: Password Hashing (Cryptographic…

⚡

Category: Cryptography / Authentication…

🔑

Purpose: Store passwords without exposing…

Topic 1

Infobox

📚 | Property | Detail | |---|---| | Full Name | Password Hashing (Cryptographic Password…

Topic 2

Password Hashing Kya Hai — Simple Analogy

💡

Anda (egg) = Tumhara password…

🔑

Omelette banana = Hashing process…

⚡

Omelette = Hash output…

🎯

Wapas anda banana? = IMPOSSIBLE —…

Topic 3

Kyu Zaroori Hai — Plain Text Ka Khatra

🎯 Scenario 1: Plain Text Storage (Disaster) ` Database: user: anil password: MySecret@123…

Topic 4

Hashing Kaise Kaam Karta Hai

⭐ Hashing ek mathematical function hai jo input (password) ko fixed-length output (hash) me…

Topic 5

Hash Properties — 5 Zaroori Features

🔑 Ek achi password hash function me yeh 5 properties mandatory hain: | # | Property |…

Topic 6

Hashing Pipeline — Mermaid Diagram

✨ `mermaid flowchart TD A["User password<br/>'MySecret@123'"] --> B["Generate random…

Topic 7

Salt — Kya Hai aur Kyu Chahiye

💡

Cryptographically random (not…

🔑

Unique per user (kabhi reuse nahi)

⚡

Minimum 16 bytes (128 bits)…

🎯

Stored alongside hash (salt public…

Topic 8

Pepper — Extra Secret Layer

💡

Store pepper in environment…

🔑

Rotate pepper periodically…

⚡

Some architectures use HMAC with…

Topic 9

Key Stretching — Slow By Design

💡

bcrypt: Cost factor = 2^cost…

🔑

PBKDF2: Directly set iteration…

⚡

scrypt: CPU + memory cost…

🎯

Argon2: Time cost (iterations) +…

Topic 10

Password Hashing Algorithms — Full Comparison

Topic 11

MD5 aur SHA — Kyu Use Nahi Karna

💡

Collision attacks: Do alag inputs…

🔑

No salt built-in: Developer…

⚡

No cost factor: Speed adjust nahi…

🎯

SHA-1: Collision attacks proven…

Topic 12

bcrypt — Industry Standard

💡

Built-in salt: 128-bit random salt…

🔑

Adjustable cost: cost parameter se…

⚡

Self-describing output: Algorithm,…

🎯

Fixed output: 184-bit hash…

Topic 13

scrypt — Memory-Hard Defense

💡

N: CPU/memory cost (e.g., 2^14 =…

🔑

r: Block size (e.g., 8)

⚡

p: Parallelism factor (e.g., 1)

🎯

Memory used: 128 × N × r bytes

Topic 14

Argon2 — Current Best

💡

Argon2d: Data-dependent — maximum…

🔑

Argon2i: Data-independent —…

⚡

Argon2id: Hybrid — first pass…

🎯

time (t): Iterations count (e.g.,…

Topic 15

PBKDF2 — Compliance Standard

💡

HMAC (Hash-based Message…

🔑

Inner hash: typically SHA-256 ya…

⚡

Iteration count: OWASP recommends…

🎯

NIST/FIPS approved — compliance…

Topic 16

Verification Flow — Mermaid Sequence

🚀 `mermaid sequenceDiagram participant U as User participant A as Application participant H…

Topic 17

Attacks Against Password Hashes

📚 | # | Attack | How It Works | Effective Against | Defense | |---|---|---|---|---| | 1 |…

Topic 18

GPU Cracking — Speed Comparison

💡 Modern GPUs (like NVIDIA RTX 4090) password cracking me devastating hain: | Algorithm |…

Topic 19

Rainbow Tables aur Lookup Attacks

🎯 Rainbow Table Kya Hai? Ek pre-computed table jisme password → hash mappings stored hain.…

Topic 20

Real-World Breaches — Hashing Failures

💡

RockYou: Plain text = total…

🔑

LinkedIn: SHA-1 no salt = cracked…

⚡

Adobe: Encryption (reversible)…

🎯

Ashley Madison: bcrypt cost 12 =…

Topic 21

Implementation Best Practices

💡

Generate cryptographically random…

🔑

Minimum 16 bytes (128 bits)

⚡

Unique per user, per password…

🎯

Store with hash (most algorithms…

Topic 22

Common Problems aur Solutions

✨ | # | Problem | Root Cause | Solution | |---|---|---|---| | 1 | Passwords stored in plain…

Topic 23

Best Practices Summary

🌟 | # | Practice | Impact | |---|---|---| | 1 | Use Argon2id (or bcrypt as fallback) |…

Topic 24

History — Timeline

🚀 | Era | Year(s) | Event | |---|---|---| | Origins | 1970s | Unix crypt() — first password…

Topic 25

Glossary

📚 | # | Term | Meaning | |---|---|---| | 1 | Password Hashing | One-way process jo password…

Topic 26

Disclaimer

💡 Yeh article educational purposes ke liye hai. Password hashing implementation ke liye…

Comparison

Password Hashing Algorithms — Full Comparison

⚖️

MD5: 1991

⚖️

SHA-1: 1995

⚖️

SHA-256: 2001

Comparison

GPU Cracking — Speed Comparison

⚖️

MD5: ~40B

⚖️

SHA-1: ~12B

⚖️

SHA-256: ~4B

Diagram

Visual Flow

📊 Diagram visualization — details in narration

Diagram

Visual Flow

📊 Diagram visualization — details in narration

Quiz — Question 1

Quick Quiz

Quiz — Question 2

Complete! 🎉

Aliens Wiki · HIEN · Cinematic Knowledge

✅

➡️