Re:"Pwned Passwords" V2 With Half a Billion Passwords
by rrobukef on Thursday February 22, 2018 @05:11AM
(#16436554)
But no count of how often the hash is used. Counting bloom filters are till a bit harder to implement.
Re:"Pwned Passwords" V2 With Half a Billion Passwords
by KMag on Thursday February 22, 2018 @05:40AM
(#16436651)
Counting bloom filters are only marginally more difficult to implement. To increment a key, find the minimum value stored in all of the slots for the key, and then increment all of the stored values for that key that are equal to the minimum value. To read, return the minimum value for all of the values stored in slots for the key.
For these purposes, however, you probably instead want to store just separate Bloom filters for counts above different thresholds, since the common use case would be accept/reject decisions based upon a single threshold.
75% space savings, with no decompression necessary for use, and a 1 in 14 million false positive rate is nothing to sneeze at.