Re:Peppering (Password Storage)
by stouset on Thursday July 02, 2020 @12:25PM
(#23714953)
To prevent hash reuse, you can just use a long,
cryptographically-random salt. There exist zero reused bcrypt, scrypt, and argon2 hashes globally (assuming “good” implementations that generate salts on users’ behalf).
[ Parent
| on HN ]
Yes some implementation consider atomic time apart from thermal noises when generating them.
Re:Peppering (Password Storage)
by GoblinSlayer on Friday July 03, 2020 @09:04AM
(#23723598)
It's about an attack on prehash described later in the article.