Episode 148 - Rainbow Tables #
Airdate: 2006-05-17
Length: 1:34:32
Size: 16.15 MB
Hosts: StankDawg & Decius

I was on BinRev Radio talking about Rainbow Tables on Tuesday night. Its hard to explain something like that without a whiteboard, but hopefully it comes across well. The key points are:

Microsoft should have used salted hashes.
For password cracking, most passwords are dictionary based, and a hash table for a large dictionary is going to be smaller then a decent Rainbow table.
Rainbow tables are a neat technology nonetheless, but the most interesting application is cracking symetric ciphers.