You are to write a program, in C/C++, Java or Python, that should run using the following instruction:

Database System Concepts
7th Edition
ISBN:9780078022159
Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan
Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan
Chapter1: Introduction
Section: Chapter Questions
Problem 1PE
icon
Related questions
Question
Part Two: Implementing a rainbow table
You are to write a program, in C/C++, Java or Python, that should run using the following instruction:
$ ./Rainbow Passwords.txt
where the file Passwords.txt contains a list of possible passwords. The password file contains a password
per line, as in the provided words file and consists of strings of printable characters. Any password used
must be taken from this file, so the only stored hash information needs to relate to those entries in the file.
The program is used to find pre-images for given hash values. Rainbow tables can be used to solve
pre-image problems for hash functions. At the simplest level they can simply be a list of hash values
and the corresponding pre-images, often from some dictionary. This can be expensive in terms of storage
space however, and a more efficient way of identifying pre-images involves the use of the hash function
and reduction functions.
First step
The process is as follows:
1. Read in the list of possible passwords. Report on the number of words read in.
2. For each previously unused word W, first mark it as used and then carry out the following process
,: Your program will do some initial computations to generate the rainbow table.
(a) Apply the hash function H to the word W to produce a hash value H(W), which we refer to
as the current hash.
(b) Apply the reduction function R to the current hash, which will give a different possible password
which should be marked as used and then hashed. The resulting hash value is recorded as the
current hash.
(c) Repeat the previous step four times. You can deal with collisions if you like but are not required
to.
(d) Store the original word W and the final current hash as an entry in your rainbow table.
3. To assist with the later identification of the pre-images you should sort the rainbow table based on
the hash values
2
4. Output the list of words and corresponding "final current hashes" to a text file Rainbow. txt. Report
to standard out the number of lines in your rainbow table (
Second Step
You are now ready to carry out the second part of the exercise, finding pre-
images. Request a hash value from the user. There should be appropriate error checking as to the length
of the input string etc. The process of identifying the pre-image for the provided hash value is sketched
as follows:
1. Check if the hash value is in the rainbow table
2. If the hash value isn't in the rainbow table you reduce and hash until you get a hash value that is in
the rainbow table, or until you have done the reduce and hash enough times that it's clear from the
way the rainbow table is generated that something is wrong. Display an appropriate message if this
happens
3. Once you have identified the relevant hash value in the table you take the corresponding password
and hash it. If that is your hash value you have your pre-image. If it isn't, then reduce and hash
again, until the reduced word hashes to the hash value being searched for
4. Output the releative reduced word, that is your pre-image
A reduction function is designed to take a valid hash value and return a valid password, in this case
valid word from Passwords.txt. The reduction function to be used should be based on the number of
words in the Passwords.txt file, and since that isn't a fixed length file your method needs to be dynamic.
You should find a way to convert a hash value to an integer that identifies one of the passwords. You
can define yourself a reduction function R or find some examples online. You should describe how your
reduction function works in readme.txt.
You should use MD5 as the hash function. You don't need to implement the MD5 hash function by
yourself. You can find such a file online. Provide a reference if you use any open source implementation.
Transcribed Image Text:Part Two: Implementing a rainbow table You are to write a program, in C/C++, Java or Python, that should run using the following instruction: $ ./Rainbow Passwords.txt where the file Passwords.txt contains a list of possible passwords. The password file contains a password per line, as in the provided words file and consists of strings of printable characters. Any password used must be taken from this file, so the only stored hash information needs to relate to those entries in the file. The program is used to find pre-images for given hash values. Rainbow tables can be used to solve pre-image problems for hash functions. At the simplest level they can simply be a list of hash values and the corresponding pre-images, often from some dictionary. This can be expensive in terms of storage space however, and a more efficient way of identifying pre-images involves the use of the hash function and reduction functions. First step The process is as follows: 1. Read in the list of possible passwords. Report on the number of words read in. 2. For each previously unused word W, first mark it as used and then carry out the following process ,: Your program will do some initial computations to generate the rainbow table. (a) Apply the hash function H to the word W to produce a hash value H(W), which we refer to as the current hash. (b) Apply the reduction function R to the current hash, which will give a different possible password which should be marked as used and then hashed. The resulting hash value is recorded as the current hash. (c) Repeat the previous step four times. You can deal with collisions if you like but are not required to. (d) Store the original word W and the final current hash as an entry in your rainbow table. 3. To assist with the later identification of the pre-images you should sort the rainbow table based on the hash values 2 4. Output the list of words and corresponding "final current hashes" to a text file Rainbow. txt. Report to standard out the number of lines in your rainbow table ( Second Step You are now ready to carry out the second part of the exercise, finding pre- images. Request a hash value from the user. There should be appropriate error checking as to the length of the input string etc. The process of identifying the pre-image for the provided hash value is sketched as follows: 1. Check if the hash value is in the rainbow table 2. If the hash value isn't in the rainbow table you reduce and hash until you get a hash value that is in the rainbow table, or until you have done the reduce and hash enough times that it's clear from the way the rainbow table is generated that something is wrong. Display an appropriate message if this happens 3. Once you have identified the relevant hash value in the table you take the corresponding password and hash it. If that is your hash value you have your pre-image. If it isn't, then reduce and hash again, until the reduced word hashes to the hash value being searched for 4. Output the releative reduced word, that is your pre-image A reduction function is designed to take a valid hash value and return a valid password, in this case valid word from Passwords.txt. The reduction function to be used should be based on the number of words in the Passwords.txt file, and since that isn't a fixed length file your method needs to be dynamic. You should find a way to convert a hash value to an integer that identifies one of the passwords. You can define yourself a reduction function R or find some examples online. You should describe how your reduction function works in readme.txt. You should use MD5 as the hash function. You don't need to implement the MD5 hash function by yourself. You can find such a file online. Provide a reference if you use any open source implementation.
Expert Solution
trending now

Trending now

This is a popular solution!

steps

Step by step

Solved in 3 steps

Blurred answer
Knowledge Booster
Structure chart
Learn more about
Need a deep-dive on the concept behind this application? Look no further. Learn more about this topic, computer-science and related others by exploring similar questions and additional content below.
Similar questions
Recommended textbooks for you
Database System Concepts
Database System Concepts
Computer Science
ISBN:
9780078022159
Author:
Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan
Publisher:
McGraw-Hill Education
Starting Out with Python (4th Edition)
Starting Out with Python (4th Edition)
Computer Science
ISBN:
9780134444321
Author:
Tony Gaddis
Publisher:
PEARSON
Digital Fundamentals (11th Edition)
Digital Fundamentals (11th Edition)
Computer Science
ISBN:
9780132737968
Author:
Thomas L. Floyd
Publisher:
PEARSON
C How to Program (8th Edition)
C How to Program (8th Edition)
Computer Science
ISBN:
9780133976892
Author:
Paul J. Deitel, Harvey Deitel
Publisher:
PEARSON
Database Systems: Design, Implementation, & Manag…
Database Systems: Design, Implementation, & Manag…
Computer Science
ISBN:
9781337627900
Author:
Carlos Coronel, Steven Morris
Publisher:
Cengage Learning
Programmable Logic Controllers
Programmable Logic Controllers
Computer Science
ISBN:
9780073373843
Author:
Frank D. Petruzella
Publisher:
McGraw-Hill Education