Re:I mean, why not tell everyone our password hashes?
by TheCoelacanth on Friday July 14, 2017 @11:03PM
(#14774837)
You don't have to store all of the possible passwords, just the hashes for all of the real passwords that you are trying to crack.
[ Parent
| on HN ]
Re:I mean, why not tell everyone our password hashes?
by Retric on Saturday July 15, 2017 @08:50AM
(#14776403)
If you mean after generating a hash you can compare it to your list of hashes then that saves time for cracking every password, but it's slower than cracking one password. Assuming you wanted to crack every Facebook password this way, that's not going to fit into cache and a binary search into RAM is actually rather slow. Yea, you could have more computers doing just this, but it's much slower than computing the hash in the first place.
Re:I mean, why not tell everyone our password hashes?
by TheCoelacanth on Saturday July 15, 2017 @02:08PM
(#14778027)
You wouldn't need to do a binary search. The values are already MD5 hashes. You could do a hash table lookup in just a few CPU cycles since computing the hash is free.