Ungaze ugcine igama lokugqitha kwisicatshulwa esicacileyo ngelixa uqinisekisa umsebenzisi okanye usenza into efanayo.
Kuba abantu abaninzi basebenzisa igama eliyimfihlo, ukuba umhlaseli ubhaqa isiseko sedatha yee-password ezifihliweyo, zinokusetyenziswa ngokulula kunye nee-imeyile ezihambelanayo zokungena kwiwebhusayithi edibeneyo okanye iakhawunti kwaye isetyenziselwa ukuzama ukufikelela kwezinye iiakhawunti.
Amagama okugqithisa asoloko ekhawuleziswa namhlanje xa igama lokugqitha linikezelwe. Kucetyiswa ukuba ihashi ngetyuwa kwaye ugcine ityuwa kunye negama lokugqitha.
Ukugalela ityuwa kunokubonakala njengelinye lamanyathelo kwiresiphi ye-hash browns, kodwa kwi-cryptography, ibhekisa ekongezeni idatha engacwangciswanga kwigalelo lomsebenzi we-hash ukuqinisekisa ukuba i-hash iyakuhlala ibonelela ngesiphumo esisodwa nokuba amagalelo ayafana.
Ngenxa yoko, i-hash eyahlukileyo eyenziwe ngokongeza ityuwa inokusikhusela kwiindlela ezininzi zokuhlasela, kubandakanya uhlaselo lwetafile ye-hash, ngelixa ucinezela isichazi-magama kunye neenzame ze-brute-force ngaphandle kweintanethi.
Apha, ngoncedo lweekhowudi eziziqwengana, siza kubonisa indlela yokusebenzisa 'i-bcrypt' ukukhusela amagama ayimfihlo.
Ke, yintoni 'i-bcrypt'?
I-Bcrypt lithala leencwadi le-hashing elixhasa iilwimi ezininzi kwaye libonelela nge-encryption ekhethekileyo ye-password. Ukonyusa ukhuseleko lwephasiwedi yakho, ivelisa ngokuzenzekelayo oonobumba abangaqhelekanga (ityuwa) xa uguqulela umtya wakho.
Unokukhetha kwakhona ukuchaza ukuba bangaphi abalinganiswa abongezelelweyo onqwenela ukubongeza kumtya ongenayo.
Ilayibrari ye-bcrypt ifunda kuphela ikhowudi ye-byte, hayi imitya ekrwada. Ke ngoko, phambi kokungenisa igama eliyimfihlo elingenayo kwibcrypt yoguqulelo oluntsonkothileyo, kufuneka uqale uyifake ikhowudi.
Uguqulelo oluntsonkothileyo kunye nekhowudi azizozinto ezifanayo. Iqinisekisa nje ukuba umtya uyafundeka ngomatshini phambi kokuba ugqunywe bubuchule bokufihlwa.
Ukusebenzisa i-bcrypt ukuFihla iPassword kwiPython
I-Python yenza i-bcrypt password encryption ibe lula. Siza kugxila ekwenzeni oku ngaphandle koncedo lwesakhelo. Kodwa ungakhathazeki, ukuba uyayiqonda indlela yokugcina amagalelo omsebenzisi kwaye uwafunde kwisiseko sedatha, inkqubo iyafana kwisakhelo.
ufakelo
Udinga kuphela ukuseta indawo engqongileyo yePython kwaye emva koko usebenzise i-IDE efana nePyCharm. Ithala leencwadi kufuneka lifakwe kuqala:
I-encrypting password
Makhe sibone indlela yokusebenzisa i-bcrypt ukufihla umbhalo emva kokuba ufakiwe:
Ikhowudi yePython ekhankanywe ngasentla yenza kwaye ikhuphe umtya ofihliweyo webyte. Kodwa ngalo lonke ixesha uqhuba iskripthi, isiphumo siyahluka. I-Bcrypt isebenzisa le ndlela yokuqinisekisa ukuba wonke umsebenzisi unegama eliyimfihlo elifihliweyo ngokuthe ngqo.
Oko, ngengozi, yeyokufihla igama eliyimfihlo.
Ukuthelekisa igama lokugqitha kunye noQinisekiso usebenzisa iBcrypt
Kwenzeka ntoni ukuba unqwenela ukugcina igama eligqithisiweyo elikhawulezayo kwaye ujonge kamva ukubona ukuba liyahambelana na negama eligqithisiweyo elithunyelwe ngumsebenzisi ukuze lingqinisiswe?
Ilula loo nto. Kuphela igama eligqithisiweyo lokuqinisekisa ekufuneka lithelekiswe nongeniso lwesiseko sedatha (okanye kwinkumbulo kulo mzekelo).
Igama eligqithisiweyo lokungqinisisa kufuneka lifakwe ngekhowudi phambi kokuba lithelekiswe naleyo ikwisiseko sedatha kuba i-bcrypt inokufunda kuphela imitya ye-byte. Ngokusisiseko, uya kuthelekisa igalelo loqinisekiso olukhowudiweyo kwikhowudi eyimfihlo egqithisiweyo onayo ngoku kwisiseko sedatha yakho.
Masivavanye oku ngokusebenzisa amagalelo ePython angeyonyani:
Xa usebenzisa le khowudi ikhankanywe ngasentla, uya kunikwa igama lokugqitha elitsha. Oku kugcinwa kwinkumbulo yiPython. Kwicandelo lokuqinisekisa, uya kuthi emva koko ufake igama eligqithisiweyo elifanayo, eliyimfihlo kuwe.
Ukuba igama eligqithisiweyo liyathelekiswa kunye naleyo ibifihliwe ngaphambili kwaye yagcina umdlalo, iPython ikhupha umyalezo wempumelelo.
Ukuba akunjalo, umyalezo wemposiso uyaprintwa kuze ke kongezwe esinye isivakalisi.
Ingcinga esisiseko iyafana naleyo yokubhalisa kunye nokunikezela ngegama eliyimfihlo kwisiseko sedatha ukuze kungqinwe.
isiphelo
Nangona sisebenzise amagama ayimfihlo afihliweyo ukubonisa indlela ibcrypt esebenza ngayo kwimemori emfutshane yePython, ukusebenza kwayo kulele kwii -apps ezisisiseko somsebenzisi.
Nangona kunjalo, eli nqaku libonisa iindlela ezibalulekileyo zokucwangcisa ikhowudi yakho ukufezekisa oku, nakwiimeko zehlabathi lokwenyani.
Umzekelo, ukuba usebenzisa iFlask, ungabonelela ngobhaliso kunye neendawo zokungqinisisa ngokusebenzisa iifomu zewebhu ezahlukeneyo endaweni yamagalelo.
Ewe kunjalo, ngelixa uthelekisa amagama ayimfihlo, uya kufunda kwisiseko sedatha esiqulethe amagama ayimfihlo agcinwe kwihlabathi lokwenyani.
UJona Nitsch
Enkosi ngale ngcaciso ilula nelula,
Oku kwandinceda kakhulu kwiprojekthi yam yangoku.
Ndicinga ukuba kuhle kakhulu ukuba ikhowudi yomzekelo inqunyelwe kuncinci kwaye ayilayishwanga njengezinye iinkcazo ezininzi.
Ngokuzithoba