cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
19109
Views
10
Helpful
4
Replies

algorithm-type scrypt?

in my CCNA Security course in school, the standard for enable passwords and username accounts was including the statement

"algorithm-type scrypt" in them

username ___ privilege ____ algorithm-type scrypt secret _____

i can't find much documentation on this and what it means

1 Accepted Solution

Accepted Solutions

By default, passwords are hashed with MD5 which is not very resistant against brute force attacks because it's too easy to compute. Scrypt and PBKDF2 (which can be used with "algorithm-type sha256) are much slower to compute and take longer to brute force. For passwords, this is a desired feature.

https://en.wikipedia.org/wiki/Scrypt

https://en.wikipedia.org/wiki/PBKDF2

View solution in original post

4 Replies 4

By default, passwords are hashed with MD5 which is not very resistant against brute force attacks because it's too easy to compute. Scrypt and PBKDF2 (which can be used with "algorithm-type sha256) are much slower to compute and take longer to brute force. For passwords, this is a desired feature.

https://en.wikipedia.org/wiki/Scrypt

https://en.wikipedia.org/wiki/PBKDF2

codewize
Level 1
Level 1

For some reason I'm finding this and a few other commands are not supported by the devices available in PackeTracer. Oddly enough, one of those is the HTTPS server on the ASA5506

It's a bit frustrating during labs because you're not sure if you're typing wrong or if you've lost your mind.

Packet tracer often only provides subsets of the commands available on "real" Cisco network devices. (Also, the commands PT provides are more likely to work incorrectly too.)

This is the first time I've had a major issue like this with packet tracer and I have to say it's pretty disappointing. Not a great training aid at all.
Review Cisco Networking products for a $25 gift card