Enhancing Password Security Using a Hybrid Approach of SCrypt Hashing and AES Encryption
Vicky Bidhuri · NORMA · 2019
To be a part of this modern society, we have to register for online accounts and have to swallow the fact that a centralized database storing our passwords will sooner or later suffer a data breach. Cryptography techniques like hashing (SHA256, BCrypt, SCrypt and Argon2) and encryption (AES, 3DES and ECC) are proven secure; however, the confidentiality of password is still compromised. Our sensitive and valuable information is still vulnerable to multiple attacks like brute force, reverse engineering, Graphical Processing Units (GPU) and custom hardware attack. This research paper focuses on the hybrid combination of a strong memory hard hashing function SCrypt and a memory accelerated Advanced Encryption Standard (AES) algorithm, which can be used to enhance the security of password of online users from brute force attacks.