nerdexam
CompTIA

PT0-002 · Question #107

User credentials were captured from a database during an assessment and cracked using rainbow tables. Based on the ease of compromise, which of the following algorithms was MOST likely used to store…

The correct answer is A. MD5. If user credentials were easily cracked using rainbow tables, it strongly suggests the passwords were stored with a fast, unsalted hashing algorithm like MD5.

Vulnerability discovery and analysis

Question

User credentials were captured from a database during an assessment and cracked using rainbow tables. Based on the ease of compromise, which of the following algorithms was MOST likely used to store the passwords in the database?

Options

  • AMD5
  • Bbcrypt
  • CSHA-1
  • DPBKDF2

How the community answered

(50 responses)
  • A
    86% (43)
  • B
    4% (2)
  • C
    8% (4)
  • D
    2% (1)

Why each option

If user credentials were easily cracked using rainbow tables, it strongly suggests the passwords were stored with a fast, unsalted hashing algorithm like MD5.

AMD5Correct

MD5 is a fast, unsalted hashing algorithm, and passwords hashed with MD5 are highly susceptible to cracking using rainbow tables. Rainbow tables pre-compute hashes for common passwords, and MD5's speed makes it easy to compare hashes against these tables efficiently, especially without salting.

Bbcrypt

bcrypt is a strong, slow, and salt-aware hashing algorithm specifically designed to be resistant to rainbow table attacks and brute-force attacks by increasing the computational cost of hashing.

CSHA-1

SHA-1, like MD5, is a fast hashing algorithm, but its hashes are still more computationally expensive to crack with rainbow tables compared to MD5, and its resistance significantly improves with salting.

DPBKDF2

PBKDF2 (Password-Based Key Derivation Function 2) is a key derivation function designed to make brute-force and rainbow table attacks computationally expensive by repeatedly applying a pseudorandom function, making it resistant.

Concept tested: Password hashing algorithms, rainbow table attacks

Source: https://learn.microsoft.com/en-us/dotnet/api/system.security.cryptography.md5?view=net-8.0

Topics

#Password Hashing#MD5#Rainbow Tables#Cryptographic Vulnerabilities

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice