Re:League of Legends database compromised, passwords hashed ...
by pestaa on Saturday June 09, 2012 @04:22AM
(#4087594)
Not an expert, but I believe rehashing the hashes is a good way to decrease entropy.
[ Parent
| on HN ]
Re:League of Legends database compromised, passwords hashed ...
by xkcdfanboy on Saturday June 09, 2012 @08:21AM
(#4087924)
As long as the salt is added for each recursive iteration, it should destroy any kind of cryptographic hints given by hashing a hash. So you shouldn't be doing F(F(F(X))) rather it should be F(SALT + F(SALT + F(SALT+X)))
But anyhow, I was talking about increasing the security of an already-existing hash algorithm. Even if the recursive hashing isn't that much more secure, it definitely isn't less secure than one pass...