News for hackers. Stuff that matters.

A comment on Using pepper to increase the security of stored passwords.

Re:Using pepper to increase the security of stored passwords by cleanyourroom on Sunday March 03, 2019 @10:50AM (#19294997)
Wouldn’t an attacker only have to manage to bruteforce 2 of the hashes in order to discover this pepper, which would just be the text that is common between them?
[ Parent | on HN ]
Re:Using pepper to increase the security of stored passwords by MattPalmer1086 on Monday March 04, 2019 @05:33AM (#19300208)
If they could brute force just one hash they would know the pepper. But this is already infeasible if the pepper has sufficiently high entropy.
[ Parent | on HN ]