News for hackers. Stuff that matters.

A comment on Security Update. Parent comment

Re:Security Update by tgsovlerkhgsel on Friday May 17, 2019 @03:31AM (#19937193)
> MD5 is vulnerable. Why pick anything remotely vulnerable, when you don't have to? SHA-2

For the purpose of hashing passwords, there's no significant difference between MD5 and SHA-2. Both are awful choices.

Edit: Actually, SHA-2 may be worse because CPUs have hardware acceleration and thus the attacker may be able to crack it somewhat faster than MD5.

[ Parent | on HN ]
Re:Security Update by zenexer on Friday May 17, 2019 @09:31AM (#19939402)
It’s definitely not worse—MD5 is faster with GPUs—but plain SHA-2 isn’t much better, either.
[ Parent | on HN ]