In this video, let's try to look at the last two password and voiceprints security framework, which
are bit creepy and password encoded.
So Big Red Passport and is the most commonly used password encoders these days in any application for
hashing mechanism, especially for passwords.
So this follows a big trip, strong hashing function to encode the password.
And you can create this encoder by following any of these three constructor's.
The very first one is, which is a default constructor, followed by a second constructor, where you
can mention the coefficient value, which represents how many times the encoding process has to go through
in terms of logarithm.
So if I mention four, that means internally it will go to the two power four of rounds for the encoding
process.
And at the same time you can leverage the third constructor where along with the coefficient value,
you can also pass to secure a random instance, to generate a random sample for your hashing mechanism
top secret password, and it will solve most of your problem.
But as we pass day by day, the hackers also are getting stronger CPU stronger GPU processes, which
can help them to derive the orginally text by comparing hash of each and every text available in that
vicinity.
So to avoid that, we have a recent password encoder, which is a secret password and it has so many
parameters except which not only will take exponential aim of the hacker to decode your hash, but also
it will take the exponential memory of the C.P.U who want to decode the password hash.
So due to that reason, you are free to use decrypt are password encoders and these should solve our
problems and the way that we stored inside the database for any application compared with the previous
password encoders, which we discussed this password and are pretty strong in nature.
And any hackers need lots and lots of time on memory and processes in order to decode these hashes,
which is almost impossible in the current situations.
So in the secret password, incorrupt.
So we have to construct this.
Where we can create this one is the default constructor and the second one is the constructor where
it accepts five parameters.
So we will see what are these five parameters by going into the score.
First, let's try to go and see what is the secret password and password.
And as I said, it has a simple constructor and at the same time it also has a constructor where we
can pass the strength of the coefficient in terms of law grounds.
And it ranges from four to Tacuba.
And it also has various versions so that when we have a constructor, which can accept the version,
but I think we don't have to use this, we should as a developers and architects, we should always
worry about the strength and the default constructor and by default, the two year version is used by
the springform.
But if there is a scenario where you want to change this version of, always go and use the observations
that we have, it is to way to build.
For that.
We also have a method where it will call internally big library to hash the password, bypassing the
real password, and that's all associated with it.
And at the same time, we also have a mattress implementation where it will try to check the password,
bypassing the original password and at the same time encoded password.
So inside this, the original password will be hashed and it will try to compare the hash value that
we maintain to the database and what we calculate it from the user input value is equal, not the one
that matches will boolean.
For that, we also have a password encoder and as I was saying, it has a default constructor that we
are mentioning the default constructor without passing any parameters.
It internally uses the same numbers which was shown previously because these are the default numbers
that this password incorrect answers.
Let's try to see what are these numbers the first number considers to be course?
What is a cost that you want to leverage to generate hash and memory cost, which is the second parameter
and the third one is a parallelization.
So how many, of course, you want to use and 41 is a Kēlen that you want to generate.
And last one is that's all that you want to generate.
So considering all these parameters, the password encoder is most powerful compared to any other password
and.
Because it's not only takes exponential time of the attack, but also exponential memory of the hacker
process or any CPU GPU that hacker is using.
So with this, we have discussed enough of theory about the password encoders in the next video.
Let's try to make changes to our application to use Vickrey password encoder, considering that is the
most commonly used password encoded these days.
That's why I want to show you a hands on how to implement any of the password encoder, which is in
no scenario, secret password encoder.
Thank you.
And see you in the next by.