liveBook · Manning

Hash function

As explained in Acing the CCNA Exam: Volume 2 Advanced Networking and Security

A hashing algorithm transforms input data into a fixed-size digest that can support password protection and integrity verification.

A hash function converts input data such as a password into a fixed-length digest that cannot be reverted to the original input. Hashing is one-way, unlike reversible encryption. section 11.3.1

For Cisco IOS password protection, store enable secrets as hashes rather than cleartext or weak reversible encryption. Type 0 enable passwords expose cleartext, while type 7 passwords remain easily decryptable. section 11.3.1

Use enable secret instead of enable password. IOS supports multiple hashing algorithms; the available algorithms depend on the device model and IOS version, and an unspecified algorithm uses the device default. section 11.3.1

Hash an enable secret with scrypt

SW1(config)# enable algorithm-type scrypt secret CiscoCCNA SW1(config)# do show running-config | include enable enable secret 9 $9$h.p1X8KVxbaILq$pNEykQjoAJbKCYfmBL9Hq8yPU/EqDGpoBkCIZ.s9GJA The saved value is a hash, and the leading algorithm indicator identifies scrypt.

How Acing the CCNA Exam: Volume 2 Advanced Networking and Security covers it

How deep it goes
Defines one-way fixed-length conversion and contrasts password storage options, but does not explain algorithm internals.
Examples
Uses Cisco IOS enable-secret configuration and running-configuration verification with scrypt output.
What you can do after
Configure and verify a Cisco IOS enable secret stored with a selected hashing algorithm.
How it connects
Connects password protection with encryption, enable secret, enable password, Cisco IOS, MD5, and scrypt.

Also explained in

Compare how 16 books explain hash function →

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Acing the CCNA Exam: Volume 2 Advanced Networking and Security. The section links point to the parts of the book it draws on.