News for hackers. Stuff that matters.

A comment on New NIST password guidelines: don't require character types or rotation. Parent comment

Re:New NIST password guidelines: don't require character typ... by sleavey on Wednesday December 14, 2016 @01:04PM (#13178143)
Can hashing iterations be conducted in parallel? Doesn't the next hash need the output of the last, making this a sequential operation?
[ Parent | on HN ]
Re:New NIST password guidelines: don't require character typ... by niftich on Wednesday December 14, 2016 @01:10PM (#13178194)
Both of you are correct, just talking about different things. PBKDF2 rounds are clearly sequential.

Meanwhile, you can issue multiple simultaneous requests in parallel to try to authenticate the credentials, possibly from a large bank of distinct hosts.

[ Parent | on HN ]