Kyauta Mai Duba Ɓarna ta Kalmar Sirri

Duba ko kalmar sirri ta taɓa bayyana a cikin sanannun ɓarna na bayanai ta hanyar Have I Been Pwned — ta amfani da k-anonymity, don haka ana ɓoye kalmar sirrin a gida kuma ana aikawa da ɗan gajeren harafi biyar na hash kawai. Kalmar sirrin da kanta ba ta taɓa barin burauzarka.

Ba a taɓa aika kalmar sirrinka a ko'ina ba. An sarrafa ta da SHA-1 a na'urar gizonka, kuma haruffa 5 na farko na wancan hash ɗin kawai ake aikawa zuwa API na Have I Been Pwned range. Uwar garke tana mayar da kowane hash da aka ɓarna wanda ke da wannan farkon, kuma ana bincika daidaituwa a wurin — wannan shine tsarin k-anonymity, don haka sabis ɗin ba zai taɓa sanin kalmar sirrinka ko cikakken hash ɗinta ba.

Wannan bincike yana yin buƙata guda ɗaya ta hanyar sadarwa — yana aika farkon hash na haruffa 5 zuwa api.pwnedpasswords.com. Ba a taɓa aika kalmar sirrinka da cikakken hash ɗinta ba.

Yadda Yake Aiki

Yana bincika kalmar sirri a bankin bayanan Have I Been Pwned na biliyoyin kalmomin sirri da aka fasa — ba tare da aika kalmar sirri zuwa ko'ina ba. Yana amfani da tsarin k-anonymity: haruffa 5 na farko na hasha SHA-1 na kalmar sirri kaɗai ke barin burauzarka.

  1. 1
    Ana hasha kalmar sirri a gida
    Ana hasha kalmar sirrinka da SHA-1 a burauzarka ta Web Crypto API. Kalmar sirri kanta ba ta taɓa barin na'urarka.
  2. 2
    Haruffa 5 na farko kawai ake aikawa
    Ana aika haruffa 5 na farko na hex na hasha zuwa API na kewayon Have I Been Pwned, wanda yake dawo da duk hasha da aka fasa masu wannan farko.
  3. 3
    Ana bincika daidaituwa a burauzarka
    Burauzarka tana neman ƙarshen hashanka a wannan jeri kuma tana nuna sau nawa (idan akwai) kalmar sirri ta bayyana a fashewa. Sabis ɗin ba ya taɓa sanin wanne ne naka.

Wannan shi ne kayan aikin LibraTool kaɗai da yake yin buƙatar yanar gizo, kuma ko a nan kalmar sirrinka da hasha ɗinta gaba ɗaya ba sa taɓa barin burauzarka — sai dai haruffa 5 na farko na hasha.

Kayan Aiki Masu Alaƙa

Tambayoyin Da Ake Yi Sau Da Dama