News for hackers. Stuff that matters.

A comment on Passwords for 32M Twitter accounts may have been hacked and leaked. Parent comment

Re:Passwords for 32M Twitter accounts may have been hacked a... by creshal on Thursday June 09, 2016 @06:41AM (#11868537)
https://gist.github.com/epixoip/a83d38f412b4737e99bbef804a27...

107 kHashes/second/machine for bcrypt in default settings (which probably many sites will use).

[ Parent | on HN ]
Re:Passwords for 32M Twitter accounts may have been hacked a... by cm2187 on Thursday June 09, 2016 @07:09AM (#11868616)
In the comment at the bottom it says: bcrypt work factor is 5, scrypt work factor is N=1024 r=1, and PBKDF2 rounds are set to 1,000.

If they did indeed use a work factor of 5 then this analysis is pretty much meaningless for bcrypt. The default is 10 and I usually use 12 myself.

[ Parent | on HN ]