News for hackers. Stuff that matters.
Re:Blooming Password – A banned password check using a bloom... by ubernostrum on Friday June 15, 2018 @06:10PM (#17324054)
I maintain a library that talks to the Have I Been Pwned password database, which uses a 5-hexadecimal-digit prefix of the SHA1 hash.

Someone filed a PR asking to add a cache for HIBP's responses, and I did some quick math and came up with ~1200 as a birthday-paradox number for the first five digits of a SHA1 hex digest (assuming uniform/random distribution of hex digits).

There are no comments on this comment yet.