Grokking Spring Boot
Vote

0% completed

​

Storing Passwords

Suppose the customer table of the booking service leaked, and its passwords had been stored as plain SHA-256 hashes. These are the first 16 characters of two rows, taken from the program later in this lesson.

ana@example.com   a87dcd9380902248
ben@example.com   a87dcd9380902248

Nobody can read a password from these values directly. Still, the two rows are identical, so anyone with the table knows at once that Ana and Ben chose the same password. An attacker with a list of hashes of common passwords learns more

.....

.....

.....

Like the course? Get enrolled and start learning!

Reading Progress

0%

Vote for new content