摘要
分析了两大热门网络论坛的用户口令在服务器端加密和本地cookie中加密的安全性。首先,研究两大网络论坛的用户口令和安全问题的加密准则,包括加密的算法、密钥的产生以及加密后数据的存储。另外,根据现有对口令的破解能力,从加密算法的强度和口令破解的复杂度两个方面评估和比较两大论坛口令的安全级别。为增强论坛用户口令的安全性,对加密算法的具体实现和口令的选择策略提出了一些建议,如选择带salt值的MD5加密算法、优化口令的选择策略等。
Encryption security of the user passwords for the two popular network forums in server-side encryption and local cookies is analyzed. Firstly, the encryption criteria for user passwords and security issues for the two major network forums are explored, including encryption algorithms, key generation, and encrypted-data storage. Then, according to the existing ability to crack the password, the security level of the passwords for the two major forums is evaluated and compared from the strength of the encryption algorithm and the complexity of the password cracking. In order to enhance the security of forum user passwords, some proposals are suggested on the implementations of encryption algorithms and the strategies of passwords selection, such as the selection of MD5 encryption algorithm with salt value, selection strategy of optimized passwords, and so on.
作者
杜薇
张李军
张爱丽
DU Wei;ZHANG Li-Jun;ZHANG Ai-Li(No.30 Institute of CETC, Chengdu Sichuan 610041, China;Science and Technology on Communication Security Laboratory, Chengdu Sichuan 610041, China;Xin Lian College of Henan Normal University, Zhengzhou Henan 450000, China)
出处
《通信技术》
2018年第5期1179-1184,共6页
Communications Technology
关键词
网络论坛
密码安全
密码算法
cookie加密
network forum
password security
cryptographic algorithms
cookie encryption
