Skip to content

Latest commit

 

History

History
37 lines (25 loc) · 1.24 KB

README.md

File metadata and controls

37 lines (25 loc) · 1.24 KB
Raw

password-salting

Password salting example written in C utilizing hashing algorithm SHA-256 (SHA-2). Developed for educational purposes only.

DISCLAIMER: THIS ALGORITHM HAS NOT BEEN TESTED AND AUDITED, SO DON'T USE IT ON A REAL APPLICATION! IF SO, USE AT YOUR OWN RISK!

Compiling

$ make clean
$ make

Usage

$ ./password-salting <password> <work_factor> <salt_size>

Example

$ ./password-salting password1234 16 8

Output

Password: password1234
Work factor: 16
Number of iterations: 65536
Salt length: 8
Generated salt: 3425e872
Salted password: password12343425e872
Final hashed salted password: 7ce5aec45f2ead6e6c28ab7a88be6d3a73f359be8f535facedc94d110138d8d7

Algorithm

  1. The program reads an specified string which will be the password to be salted and hashed, the work factor and the salt size in bytes;
  2. A random salt is generated using /dev/urandom with the given input length;
  3. The salt is appended to the given string (password);
  4. The hashing algorithm SHA256 is applied N times, which is given by 2^work_factor: SHA256(SHA256(SHA256(SHA256...SHA256(password+salt)...)))
  5. Finally, the program outputs the final hashed salted password.