News for hackers. Stuff that matters.
Re:Why Keccak is not ARX by Dylan16807 on Wednesday September 20, 2017 @05:10AM (#15291862)
When one hash is a billion times too fast to securely store passwords, and another hash is ten billion times too fast to securely store passwords, the speed difference doesn't matter.

All the hashes you'd care to look at are within an order of magnitude of speed. They all need to be repeated a very large number of times to fight brute forcing. Using more repetitions for a faster hash is so utterly trivial it's not even worth mentioning in the context of security. There is zero difference in security margin from the speed of a hash.

And yes, memory-intensive algorithms are good for passwords, so you shouldn't be caring about normal hashes at all.

There are no comments on this comment yet.