by aestetix

What are rainbow tables?

A rainbow table is a lookup table designed to help recover plaintext from a one-way hash. It is created by collecting all possible (in theory) plaintexts of a specific nature (length, character set) and their respective outputs from a hash function. In short, it's a code book for a hash function. These tables can then be used to run quick brute-force attacks against hashes. Due to their nature, rainbow tables are very large (ranging from 500 megs to 40 gigs), and take many days to compute, depending on processor speed. This is known as a time-memory tradeoff because it consumes enormous time to create, but once they are created password recovery is -very- quick.

For more information, check out:
"A Cryptanalytic Time-Memory Trade-Off" (Marty Hellman)
"Making a Faster Cryptanalytical Time-Memory Trade-Off" (Philippe Oechslin)

There are also a few active rainbow table projects:
http://www.antsight.com/zsl/rainbowcrack/ (tools to create your own rainbow tables)
http://rainbowcrack.com/ (contribute to a world-wide effort to create rainbow tables)
http://rainbowtables.shmoo.com/ (rainbow tables of different sizes, compliments of Shmoo group)

 


 
Read more of   The Yak's Frequently Questioned Answers   (mod.2007-06-30)

377.   What is a great critical Libertarianism write up?   [jake/2003-09-22]
341.   Can you give me some pointers for using gpg/pgp and other encryption?   [jake/2002-12-19]
336.   What is UNICUM? (Mi van az Unicum?)   [strick/2002-11-24]
250.   What's in a Ross Omelette?   [strick/2001-08-07] ( ross/2003-09-16 treesn/2001-12-30 )
133.   How do I format an SGI filesystem?   [rupe/2000-10-09]
118.   Where can I find out the cost of giving a sasquatch a funeral?   [rupe/2000-09-14]
74.   How many roads must a man walk down?   [vonguard/2000-04-04]
69.   What is the origin of The Yak?   [strick/2000-02-28]
65.   Where can I get help with my Physics homework?   [strick/2000-02-22]
55.   How can i find out what other websites have links to my website?   [jamison/2000-02-11]
44.   What web pages are by VONGUARD?   [strick/2000-02-02]
34.   What are some good World Wide Web facts I can impress my friends with?   [simon/2000-01-28]