Weak password detection in cloud computing environments

A non-transitory computer-readable medium storing a set of instructions for detecting weak passwords, the set of instructions comprising:

• one or more instructions that, when executed by one or more processing circuitries of a device, cause the device to:
• extract a first digest value from a password record, wherein the password record includes a cryptographic function identifier of a cryptographic function;
• extract the cryptographic function identifier from the password record;
• select the cryptographic function from a plurality of cryptographic functions based on the extracted cryptographic function identifier;
• generate a second digest value based on a result of processing the selected cryptographic function with a value selected from a dictionary list as an input;
• generate a comparison result between the second digest value and the first digest value;
• determine that a password associated with the password record is weak in response to the comparison result indicating that the generated second digest value matches the extracted first digest value;
• generate another digest value based on a result of processing the selected cryptographic function with a second value selected from the dictionary list as an input, in response to the comparison result indicating that the generated second digest value does not match the extracted first digest value, wherein the dictionary list includes the another digest value;
• and
• determine that the password associated with the password record is not weak in response to the comparison result indicating that the generated another digest value does not match the extracted first digest value, and wherein the dictionary list does not include another value.

A system for detecting weak passwords comprising:

• a processing circuitry;
• a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
• extract a first digest value from a password record, wherein the password record includes a cryptographic function identifier of a cryptographic function;
• extract the cryptographic function identifier from the password record;
• select the cryptographic function from a plurality of cryptographic functions based on the extracted cryptographic function identifier;
• generate a second digest value based on a result of processing the selected cryptographic function with a value selected from a dictionary list as an input;
• generate a comparison result between the second digest value and the first digest value;
• determine that a password associated with the password record is weak in response to the comparison result indicating that the generated second digest value matches the extracted first digest value;
• generate another digest value based on a result of processing the selected cryptographic function with a second value selected from the dictionary list as an input, in response to the comparison result indicating that the generated second digest value does not match the extracted first digest value, wherein the dictionary list includes the another digest value;
• and
• determine that the password associated with the password record is not weak in response to the comparison result indicating that the generated another digest value does not match the extracted first digest value, and wherein the dictionary list does not include another value.