Provision of user passwords protection in authentication procedures

The article is devoted to the study of the approach to ensuring the user passwords protection, which play a decisive role in the implementation of authentication, authorization and audit security systems of using password-based hashing with the addition of so-called "salt" – a string of random data that is submitted to the input of hash functions simultaneously with source data. The analysis of known methods of attack on the authentication system, which is associated with the receipt of passwords for their hash values, which include, in particular, the bruteforce method, dictionary search, the use of special data structures - search tables, various modifications, in particular, "rainbow" tables is shown in this article. Given the current information and technical capabilities, it is not possible to completely prevent these attacks, but it is advisable to reduce their effectiveness. On the basis of the analysis, a direction is considered that can provide protection of user passwords due to the difficulty of restoring output passwords on their hash values for pre-formed "rainbow" tables, which is based on the use of hashing with the additional value which is known as "salt"