Lesson 5: Secret Codes, Blenders & Passwords

Discover how computer security protects your messages and passwords. You will crack a secret shift code, see how hacker cheat sheets work, and stop breaches using digital salt.

🗝️ Part 1: Symmetric Ciphers 🥤 Part 2: Password Blenders & Cheat Sheets 🧂 Part 3: Secret Salt Defense

Part 1: Secret Shift Ciphers (Symmetric Encryption)

🗝️ The Padlock Rule (Symmetric Encryption)

Imagine locking a treasure box with a padlock. In Symmetric Encryption, both people share and use the exact same secret key—you turn the key to lock (encrypt) it, and your friend uses the matching key to unlock (decrypt) it.

Julius Caesar's Code: A classic symmetric cipher: he shifted every letter forward in the alphabet by a shared secret key (for example with Shift 1: A → B, B → C).
Step 1 Goal: Click the shift buttons until the scrambled letters turn back into real English words.

INTERCEPTED SECRET MESSAGE

...

KEY SHIFT: 0

YOUR DECODED MESSAGE

...

🤝 Extra Cadet Mission: Encode Your Own Message & Race a Computer

Type a secret word below to encode it for your partner, or run the computer hack test to see why shift codes are too weak for computers!

1. Type Your Secret Message:

2. Choose Secret Shift Key (1 to 25):

Selected Key: 5

              Encoded Code For Partner:
              YTU XJHWJY FLJSY
            

3. Computer Brute-Force Speed Test:

How many seconds would it take a computer hacker to test every single possibility (all 25 shifts)?

Press the button above to start the computer hack test...

Part 2: Password Blenders & Hacker Cheat Sheets

🥤 The Smoothie Rule: One-Way Password Hashing

Good websites never save your actual password. Instead, they put your password into a computer blender called a Hash Function (like SHA-256).

Easy One Way: It is simple to blend strawberries and milk into a pink smoothie.
Impossible to Reverse: You can never un-blend a smoothie back into fresh strawberries!
📋 Hacker Cheat Sheets (Rainbow Tables): Because hackers cannot reverse the math, they pre-blend thousands of common passwords beforehand. When a database leaks, they simply look up the matching code!

🧪 The Password Blender Sandbox

Type any word to watch its blended code change in real time:

          Blended Hash Code:
          e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
        

💡 Notice: If you type "apple", it always produces the exact same code. But nobody could guess the word just from looking at the code!

Leaked Database Hashes

Match these 4 stolen account hashes using the Hacker Cheat Sheet on the right. Find all 4 passwords to unlock Part 3!

🎮 Gamer Account

...

🏫 School Email

...

💬 Social Chat

...

🛡️ Staff Portal

...

📋 Hacker Cheat Sheet

(Rainbow Table)

Part 3: Defeating Cheat Sheets with Secret Salt

🧂 The Secret Seasoning (Cryptographic Salt)

How do real websites defeat hacker cheat sheets? They add a pinch of Salt (a unique secret code) to every password before blending it!

The Formula: Hash(password + salt)
Why It Works: If two students choose the exact same password ("dragon"), but have different salts, their blended codes look completely different.
Result: Precomputed cheat sheets become completely useless! Hackers must test each word one by one.

🔐 User E: Salted Account Breach Audit

User E's account is protected by digital salt. Use the Testing Tool on the right to test dictionary words with User E's specific salt until you get a matching code!

Salted Hash Code: ...

Unique Salt Seasoning: ...

Cracked Password for User E:

💡 Quick-Test Dictionary Pool (Click to test):

🧂 Live Salting Simulator Tool

Test Password:

User E's Salt Seasoning:

            Salted Hash Output (SHA-256(pw + salt)):
            e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
          