User password encryption method based on improved MD5 encryption algorithm

Abstract

The invention provides a user password encryption method based on an improved MD5 encryption algorithm, and relates to the technical field of information security. The method comprises the following steps: firstly, encrypting a password input by a user during registration through an MD5 algorithm to obtain the initial encrypted data, generating a random number through an elliptic curve, sending the random number to a pseudo-random number generator, generating a random character string by the elliptic curve and the pseudo-random number generator, performing bitwise exclusive OR on the random character string and the encrypted data generated by an MD5 algorithm to generate new encrypted data as a message abstract, and storing the new encrypted data in a database. And when the user logs in again, the input password is encrypted, and the encrypted ciphertext is compared with the ciphertext stored in the database for verification. According to the method, based on the improved MD5 encryption algorithm, the random character string is added after the original MD5 algorithm is operated to perform exclusive OR operation, so that the randomness and the collision resistance of the algorithm are improved, the security of the algorithm is improved, and exhaustion attack, birthday attack and differential attack can be effectively resisted.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a user password encryption method based on an improved MD5 encryption algorithm. Background technique [0002] With the development of computer and Internet technology, a large number of websites and APP services require users to register, and users need to set passwords at the same time of registration; user passwords play a very good role in protecting user-related information. However, in recent years, many companies have experienced user information leakage incidents, and the leaked data is not encrypted or the encryption method is relatively weak, so that hackers can restore the original user password. At least hundreds of information leakage incidents have been exposed so far, including a number of first-line Internet companies, with a total of more than 1 billion pieces of data leaked. [0003] The MD5 encryption algorithm is widely used in important fields s...

AI Technical Summary

Problems solved by technology

The MD5 algorithm is irreversible and unique, but because the length of the MD5 message digest is only 128 bits, the collision phenomenon will inevitably occur when the file size gradually increases, and the attacker can always find a group in a short time by using a hash collision attack. Or multiple groups of plaintext make the MD5 message digest value equal, MD5 security is threatened

Images