Questions tagged [rainbowtable]

A rainbow table is a precomputed table for reversing cryptographic hash functions, usually for cracking password hashes.

A rainbow table is a precomputed table for reversing cryptographic hash functions, usually for cracking password hashes. Tables are usually used in recovering the plaintext password, up to a certain length consisting of a limited set of characters. It is a practical example of a space-time tradeoff, using more computer processing time at the cost of less storage when calculating a hash on every attempt, or less processing time and more storage when compared to a simple lookup table with one entry per hash. Use of a key derivation function that employ a salt makes this attack infeasible.

See more at Wikipedia

58 questions
1
vote
0 answers

Rainbow tables - how to choose the starting plaintext

I am implementing an assignment where I'm given 1000 SHA1 digests and their corresponding passwords (each 24bit or 6Hex digits long). I have to build a rainbow table <2MB on disk and in Java, I see that having chain lengths > 192 makes the search…
PKM
  • 329
  • 4
  • 17
1
vote
0 answers

How to improve on my RainbowTable-Generator?

I generate rainbow-tables as shown below. Now two questions: How can I do this without using bigint (e.g. 2 nested for-loops) while retaining the order (meaning alphabet 0-9 counts from 0 to 99 for 2 digits) ? What are the various ways to…
Stefan Steiger
  • 78,642
  • 66
  • 377
  • 442
1
vote
2 answers

Rainbow Tables: How to defend against them?

I recently obtained the l0pht-CD for windows and tried it out on my PC and It WORKS!! 2600hertz.wordpress.com/2009/12/22/100-windows-xp-vista-7-password-recovery I have also read kestas.kuliukas.com/RainbowTables/ I'm designing a…
TheCodeArtist
  • 21,479
  • 4
  • 69
  • 130
1
vote
3 answers

TypeError: must be string or buffer, not int

i am trying to solve the Rainbow Tables issue with password encryption and have come only this far. import sys import random import hashlib def mt_rand (low = 0, high = sys.maxint): """Generate a better random value """ return…
ajknzhol
  • 6,322
  • 13
  • 45
  • 72
1
vote
0 answers

Rainbow attack through python lookup is failing.

I have some issues with an assignment have been given. The gist is that I have to do a rainbow attack on a "car fop". With a generator table, the RainbowAttack.py script the following: The key broadcasts to car (in this case the adversary) The…
Christian
  • 36
  • 4
1
vote
1 answer

What length of passwords do rainbow tables go to?

My bank limits my password to 14 characters and I suspect they're encrypting with MD5 or an SHA hash, unsalted. Are there rainbow tables that contain every possible hash up to 14 characters?
brentonstrine
  • 21,694
  • 25
  • 74
  • 120
0
votes
2 answers

How does salting protect against an attacker with access to your password hashes?

I've read a fair few questions on password salting and mostly they cover the stuff that (I think) I already understand. That is; the point of including a random salt in your password hashes is firstly to prevent two hashes being the same even when…
MartinAnsty
  • 383
  • 2
  • 9
0
votes
0 answers

How to extract rainbow tables content to csv or text file?

Is there a way or better a tool to extract the content of a rainbow table to csv or text file? Tried all possible password tools (I think) and not found anything like it.
Dan
  • 43
  • 1
  • 1
  • 5
0
votes
4 answers

Does the hash algorithm used for password hashing affect rainbow table generation?

re question non-random-salt-for-password-hashes Mr Potato Head states that the use of md5 instead of SHA-512 makes generating rainbow tables easier? I'd have thought that once your rainbow table is generated that the algorithm used is irrelevant? …
Martlark
  • 14,208
  • 13
  • 83
  • 99
0
votes
1 answer

How we find a plaintext in rainbow table after delete all chain except first and end of chain

I started to learn rainbow tables and I have a question : How we can find a plaintext of hash if we delete all chain except first and end plaintext If It is wrong and we don't delete chain , why we don't use a normal pre-computing hashing…
0
votes
1 answer

How to implement a reduced rainbow table in python

I'm attempting to understand how rainbow tables work and am trying to implement one in python but without much success. I have some code which essentially creates a dictionary in a text file with plaintext strings mapped to their hashes, but can't…
Adi219
  • 4,712
  • 2
  • 20
  • 43
0
votes
1 answer

How to handle cracking passwords of different lengths with rainbow tables?

I'm doing a rainbow attack for homework and I'm getting some trouble on cracking passwords of different lengths. It means that I can crack every password of fixed length 8 for example in +-2 minutes. However, I don't know how to handle passwords…
kalistawe
  • 9
  • 1
0
votes
1 answer

How to search a text file table in Python?

I am creating a rainbow table with strings and hashes separated by spaces in a table. The rainbow table looks like this: j)O 3be44b195706cdd25e29d2b01a0e88d4 j)P a83079350701398672677a9ffe07108c j)Q 2952c4654c127f2bb1086b75d8f1f986 j)R…
0
votes
0 answers

rainbow table integer representation of character string

I've been reading the documentation of RainbowCrack and older source code, and I can't locate where the developer(s) hash reduce to a 64-bit integer, which can hold UINT64_MAX plain texts. Doc:…
JYG
  • 39
  • 1
  • 10
0
votes
1 answer

Converting MATLAB code to Python: Python types and order of operations

This is a MATLAB function from the author of RainbowCrack: function ret = calc_success_probability(N, t, m) arr = zeros(1, t - 1); arr(1) = m; for i = 2 : t - 1 arr(i) = N * (1 - (1 - 1 / N) ^ arr(i - 1)); end exp = 0; for i = 1 : t - 1 exp…
JYG
  • 39
  • 1
  • 10