PAROLNİ HASH QİLİSH USULLARİ(MD VA SHA)

Maftuna Usmonaliyeva Isomiddinovna; Quvvatali Rahimov Ortiqovich

doi:10.5281/zenodo.21213069

23.06.2026

Oʻzbekcha

PAROLNİ HASH QİLİSH USULLARİ(MD VA SHA)

Published

23.06.2026

Journal

Conceptual foundations of fundamental, applied, and innovative research in the transformation of pedagogical education and upbringing

Issue

Proceedings of the international scientific and practical conference on “Conceptual foundations of fundamental, applied, and innovative research in the transformation of pedagogical education and upbringing”

Pages

831-835

DOI

10.5281/zenodo.21213069

Authors

Maftuna Usmonaliyeva Isomiddinovna , Quvvatali Rahimov Ortiqovich

Abstract

Ushbu maqola zamonaviy axborot tizimlarining muhim xavfsizlik elementlaridan biri bo'lgan parol xeshlash texnologiyalarini, xususan, tarixan keng tarqalgan MD5 va zamonaviy SHA oilasi (SHA-1, SHA-256, SHA-512) algoritmalarini chuqur tahlil qiladi. Tadqiqotda har bir algoritmining kriptografik xususiyatlari, jumladan, bir tomonlama xossalari, toʻqnashuvga chidamliligi va deterministikligi koʻrib chiqiladi. Maqolada MD5 va SHA-1 ning aniqlangan xavfsizlik zaifliklari (masalan, "rainbow table" va toʻqnashuv hujumlari) batafsil yoritilib, ularning hozirgi kunda parol xavfsizligi uchun yaroqsizligi asoslab beriladi. SHA-2 oilasining (SHA-256 va SHA-512) yuqori darajadagi xavfsizligi va keng tarqalganligi taʼkidlanadi. Bundan tashqari, maqolada zamonaviy parol xavfsizligi uchun eng yaxshi amaliyotlar, jumladan, tuzlash (salting) va kalitni uzaytirish (key stretching) texnikalari (PBKDF2, bcrypt, Argon2 kabi funksiyalarga havola bilan) batafsil muhokama qilinadi. Maqolaning yakunida, MD5 va SHA-1 dan voz kechib, SHA-256 yoki SHA-512 ni tuzlash va ilg'or parol xeshlash funksiyalari bilan birgalikda qo'llash bo'yicha aniq tavsiyalar beriladi, bu esa tizimlarni yanada mustahkam himoya qilish imkonini beradi.

Keywords

Argon2 MD5 PBKDF2 SHA-1 SHA-256 SHA-512 autentifikatsiya. bcrypt kalitni uzaytirish (key stretching) kriptografiya maʼlumotlar xavfsizligi parol xavfsizligi toʻqnashuv (collision) tuz (salt) xavfsizlik zaifliklari xeshlash

Other language versions

English

This article provides an in-depth analysis of password hashing technologies, which are an important security element of modern information systems, in particular the historically widespread MD5 and modern SHA family (SHA-1, SHA-256, SHA-512) algorithms. The study examines the cryptographic properties of each algorithm, including its one-way properties, collision resistance, and determinism. The article details the known security vulnerabilities of MD5 and SHA-1 (such as rainbow tables and collision attacks) and explains why they are no longer suitable for password security. The high level of security and widespread use of the SHA-2 family (SHA-256 and SHA-512) are highlighted. In addition, the article discusses in detail the best practices for modern password security, including salting (salting) and Key extension (key stretching) techniques (with reference to functions such as PBKDF2, bcrypt, Argon2). At the end of the article, specific recommendations are given to abandon MD5 and SHA-1 and use SHA-256 or SHA-512 in combination with salting and advanced password hashing functions, which will provide more robust protection for systems.

Argon2 MD5 PBKDF2 SHA-1 SHA-256 SHA-512 authentication. bcrypt collision (collision) cryptography data security hashing key extension (key stretching) password security salt (salt) security vulnerabilities

References

1. NIST Special Publication 800-106: "Recommendation for Random Number Generation Using Cryptographic Techniques" (SHA algoritmalariga oid ma'lumotlar va tavsiyalar).

[https://csrc.nist.gov/publications/detail/sp/800-106/rev-1/final] (https://csrc.nist.gov/publications/detail/sp/800-106/rev-1/final)

2. NIST FIPS PUB 180-4: "Secure Hash Standard (SHS)" (SHA-2 oilasi algoritmalarining rasmiy tavsifi). [https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf] (https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf)

3. "The BCrypt Password Hashing Function" - Ofer Schiller. (bcrypt haqida texnik.ma'lumot).

[https://www.friedman.ws/crypto/bcrypt.pdf] (https://www.friedman.ws/crypto/bcrypt.pdf)

4. RFC 2898: "PKCS #5: Password-Based Cryptography Standard" (PBKDF2 haqida).

[https://datatracker.ietf.org/doc/html/rfc2898] (https://datatracker.ietf.org/doc/html/rfc2898)

4. "Password Hashing with Argon2" - Alex Biryukov, Danil Shumilov, Anton Doykov. (Argon2 haqida ilmiy maqola). [https://www.semanticscholar.org/paper/Password-Hashing-with-Argon2-Biryukov-Shumilov/a6e0870707317e353693740628677d7f3c382743]

(https://www.semanticscholar.org/paper/Password-Hashing-with-Argon2-Biryukov-Shumilov/a6e0870707317e353693740628677d7f3c382743)

5. RFC 2898: "PKCS #5: Password-Based Cryptography Standard" (PBKDF2 haqida).

[https://datatracker.ietf.org/doc/html/rfc2898] (https://datatracker.ietf.org/doc/html/rfc2898)

6. "On the Security of the SHA-1 Cryptographic Hash Function" - Xiaoyun Wang, Hongbo Yu. (SHA-1 hujumlari haqida tadqiqot). [https://eprint.iacr.org/2005/252.pdf]

(https://eprint.iacr.org/2005/252.pdf)

7. "Collisions - MD5 Considered Harmful Today" - Marc Stevens, J. den Boer,

A. Bogdanov, C. Chow, J. Buchmann, E. K. Hall, B. de Weger. (MD5 ning zaifliklari haqida ma'lumot

View PDF