In the last video, we saw how people and women were raped.
Now we'll see how to hash passwords.
So basically, what's happening is.
When he was able to buy his passport.
Now.
This password will take this and then use some hash function on it.
Not this hash function does this factor into what hash value, so this is the mechanism that will follow
in hashing, it is almost impossible to build that hash back into a password.
Why?
Because it has hash functions are designed to be calculated very quickly going forwards, but almost
impossible to go backwards.
OK.
So when the user tries to log in with their password, we turn that passwords into hash using the hash
function and compare the hash in our database.
So basically, when the user registers, then we'll, whenever things that registers, will not start
the password based order but hash that we are using.
By getting that like that, my bank card that we get by using the hash function that we installed.
Now when the user logging logs in, we'll also compare the hash when they used logs in with the national
database.
OK.
So that is what happens.
And also going forward, the complexity is less and going backwards in time.
Complexity is very that's why it is impossible to convert almost impossible, not totally impossible,
almost impossible to convert hash functions back into the past.
So there is only like not many steps on the three steps required.
First thing will be using a package called M.B. five.
That we'll see here.
You can see here this is the package that will be using.
Can see this this is a JavaScript function for hashing messages with every five.
OK.
How to use this empty fight message?
Are we going to show them defy request and then cancel amplify messages, filtering, bring the saw
what it is doing?
This is just changing this message stream into hash.
You can go to the documentation to see how it is, how they're using it and everything so they can.
The second step is just required and use it.
Required.
And use it.
The third step is we have to remove the Mongols encryption and plugin from user schema.
So as you can see here.
When we are using the database encryption and using plugins and some user schemes that we have to remove,
basically the previous encryption we have proven at this level of encryption.
So yeah, so basically this is the two things that we have for posting define them before it was to
require them to fail, requiring you have to continuously install it and after requesting it whenever
the user Typekit password will get that password by by getting rid of this thing, a request or monitored
by a password.
This is basically body parts that if you remember.
And then this will save in the database.
So this is brought up by using the same method that is used to accept functional dysfunction, you will
use and then save it in the database.
So that is all punching that short.
But before that.
Before finishing this, that is again a disadvantage of this.
So basically, this is how it works.
That will be a new encryption.
There'll be a new security mechanism that will be introduced and then that will have some loopholes.
And again, they will improvise it and then get some other mechanisms and tools like that.
So basically, there is and that is a thing called dictionary attack.
So what is dictionary attack?
Creating hashes from all the possible words in a dictionary, and that will be around 15 one lakh 50
thousand hashes that you need to create.
And also adding all the numbers from telephone book backwards.
Let's all the combination of characters up six places.
Sum total value of that will be nineteen point eight billion.
OK, so dearly beloved nineteen point eight billion words.
And then how to calculate that if some if it is possible to transfer them into the hashes and stored
in a database, then we can basically compare.
If we have access to some servers database, we can just compare the hashes that are presenting, said
that server database best to the hashes that we produce using that dictionary attack.
So using the latest GPUs are graphic cards, which are capable of parallel processing and therefore
are particularly suited for bitcoin mining also generate hashes.
So with these latest GPUs that are used for parallel mining and bitcoin mining and everything, they
can be used to generate these hashes.
And you know one thing it can calculate 20 billion modified hashes per second.
I'm talking about modifiers.
So this is it.
As I said, you will use some hash function so that I'm different, meaning this is a function.
So this function, we can basically collect 20 billion antifascist per second.
Therefore, there are pre-built hash tables that people created for the top 10000 most common passwords.
So if sometimes you like just give some random like, you know, simple password, we be not coming
from the Google.com.
This password is very risky pastebinit.
For example, most common passwords are one two three four five six seven eight.
Awkward Q W e r b the first six letters.
OK.
Hello, world.
Welcome.
Good morning.
Your names, phone numbers.
All these are general passwords.
So these are the these people passwords.
There are some 10000 most common passwords that all the tables created.
So whenever they want to have some password, they basically.
You know, they will run through this table, and if it is present, then they will simply get X or
they'll create some other new, they'll try some different things by using the dictionary attack and
they will crack it.
So one thing you have to remember is the length of the password increases the computation time that
it takes to crack.
It increases exponentially.
So how much lending will prosper is that much better?
This is a tip for you whenever you are creating passwords.
So this is all they can do this dictionary attack by using everything.
That is why for the hashing, we don't do them different venues be crap.
This is another package of npm.
Here it is.
There are some advantages and disadvantages.
Also, there is also a new technique called salting, adding added.
In the next week or so will basically see the level four that is starting and hashing passwords would
be good in the next week.
That's all from the studio.
Thank you.