OpenCyber AcademyLesson map
Lesson 09. Map, example, EX055.
flowchart TD
A["Prose names scrypt and Argon2id"] --> B["The script calls scrypt"]
B --> C{"Does the supplier's algorithm appear?"}
C -->|No| D["Leave the supplier unnamed"]
C -->|Yes| E["That name is not in the file"]
An example function and a supplier's function are different claims.
Logical drawing
chapter 3 examples
scrypt, RFC 7914
Argon2id, RFC 9106
laboratory
hashlib.scrypt on synthetic accounts
e-book supplier
stores password hashes
algorithm not named
Learning outcomes
After this chapter, you should be able to:
- Keep scrypt as the function the laboratory calls.
- Keep Argon2id as a cited example, not a second run.
- Leave the supplier's algorithm unnamed.
9.1 The citation, the script, and the supplier are three places.
Chapter 3 says a good login system stores a slow salted hash, "such as scrypt" in RFC 7914 or Argon2id in RFC 9106. The laboratory then calls hashlib.scrypt and prints the four lines already recorded. The e-book supplier stores members' password hashes. Inês points to a security page or a contract for a supplier's promise, and this manuscript never includes either document. A classmate who writes "the supplier uses scrypt" has moved the script's import into a company the file does not describe. A classmate who writes "the supplier uses Argon2id" has moved a citation the same way. Leo leaves both names where chapter 3 put them and does not add an algorithm key to the supplier row.
9.2 Worked example
Lesson table; scroll horizontally to read all columns →
| What someone cites | What the file holds | Decision |
|---|---|---|
hashlib.scrypt |
The laboratory call | Keep it on the script |
| RFC 9106 | A cited example | Keep the citation |
| The supplier stores hashes | No algorithm name | Leave it unnamed |
| "Therefore the supplier runs scrypt." | Not stated | Refuse |
Synthetic case. No supplier security page is pasted into the notes.
Errors and limits
Naming the laboratory function does not identify the supplier, and the missing name is not permission to guess one.
Apply
- EX055 — Whose function? The laboratory calls
hashlib.scrypt. The chapter also cites Argon2id. The e-book supplier stores password hashes. Which algorithm does the supplier use?Show marking criteria
Rubric: 3 = the file does not say; scrypt stays the laboratory call; Argon2id stays a citation; do not name the supplier's algorithm; do not editlab_salted.py;; 2 = the supplier stays unnamed;; 1 = one label;; 0 = none.