Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It doesn't really eradicate time-space tradeoffs. It only mildly alleviates them. Please look up bcrypt and why it's better than a simple salt. Noone proposed getting rid of salting without another measure.

And you don't "break a password first". You brute-force and compare against all of the hashes.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: