27/08/2014

Rainbow Table

A Rainbow table is a huge pre-computed list of hashes for every possible combination of characters. password hash is a password that has gone through a mathematical algorithm such as MD5 and is transformed into something which is not recognizable.
A hash is a one way Encryption so once a password is hashed there is no way to get the original string from the hashed string.
A very commonly used hashing algorithm to store passwords in website databases is MD5. It is almost similar to Dictionary Attack. the only difference is, in Rainbow Tables Attack hashed characters are used as passwords whereas in Dictionary Attack. normal characters are used as passwords.
Example: 'hello’ in md5 is 5d41402abc4b2a76b9719d911017c592 and zero length string is d41d8cd98f00b204e9800998ecf8427e
Countermeasure:
Make sure you choose password that is long and complex. Creating tables for long and complex password takes a very long time and a lot of resources