New password authentication method and device

Abstract

The invention provides a new password authentication method, which comprises the following steps of: receiving an input original password; generating a random Salt value; generating an initial key Hash0 by a Hash algorithm according to the random Salt value and the original password, wherein Hash0 = H0 (salt + password) and the magnitude of the Hash0 is L0 bytes; converting the Hash0 through a character string, and generating an initial key vector D, wherein the magnitude of the Hash0 is L0 bytes and D is 4-dimensional vector array [x, y, z, w] with magnitude of 2*L0 bytes; initializing a key Box by hybrid logic filling according to the initial key Hash0; generating a new key vector D' by logical operation according to the initialized key Box and the initial key vector D; and taking the new key vector D' as a final key. The method has extremely high security, overcomes the security defect of current software encryption, can resist violent password resolution, and can effectively protect the security of user password and data.

Description

technical field [0001] The invention relates to the technical field of information network security, in particular to a new password authentication method and device. Background technique [0002] Information security refers to protecting information and resources, protecting users and their privacy by protecting applications, data or equipment from unauthorized access or use, and ensuring that applications and data are protected under various attacks. Security during transmission. As the most basic and important link of information security, data security has always been the focus of attention. The loss of important information will bring losses to individuals and enterprises, so it is of great significance to encrypt important information. With the continuous improvement of information security requirements, various password encryption algorithms emerge in an endless stream, such as DES, etc., combined with irreversible hash algorithms to generate encryption keys, such a...

AI Technical Summary

Problems solved by technology

[0008] The file compression software WinRAR is another typical example of increasing software security by increasing the number of hash rounds. Although simply increasing the number of hash rounds can ensure security to a large extent, it will also affect the real-time performance of decryption.

Images