Question

Research newer Hashing algorithms that can replace MD5. Select 3 and do a pro-con comparison of them. Which would you recommend? Why? How would you deploy this new algorithm in your organization’s website?

Answer 1

There are more powerful hashing and encryption algorithms present in the market that are way better than MD5. such algorithms are the Advanced Encryption standard or the AES, DES and 3DES.

Pros and cons of AES:

• It can be implemented on both hardware as well as software level in your infrastructure.
• It makes use of higher key length size such as 128, 192 and 256 bits and makes it impossible for attackers to break it using brute force attack.

Cons:

• It uses simple algebraic structure.
• Entire block is encrypted using the same procedure.

Pros of DES:

• Though it uses a 56 bits key, yet it can take decades to break the key using the brute force attack.
• For both encryption and decryption, it uses the same algorithm just the key needs to be placed in a reverse order.

Cons:

• It uses weak key to encrypt and decrypt the message.

Pros of 3DES

• 3DES is easy to implement in software level as well as in hardware level.
• Most of the application supports 3DES.

Cons

• It uses low size key length for encryption and decryption.

Yes, I would recommend to use AES above all, as it is the most powerful encryption standard present in the market. Literally, it will take a 4 times of Earth's age to break a 256-bits key if considered every second brute force attack is taking place. So, your infrastructure is mostly safe with this hashing algorithm.