How crackers ransack passwords like “qeadzcwrsfxv1331”

Re:How crackers ransack passwords like “qeadzcwrsfxv1331” by ams6110 on Tuesday May 28, 2013 @12:55AM (#5778159)

The point of the salt is to prevent precomputing the hashes (a rainbow table). Per-user salts take this a step farther, so that even if two users choose the same password, they will have different hashes.

What the article really points out is what people have been saying for a while now, that if your passwords are exposed, salting really doesn't add more than a roadbump to a cracker if you are computing your hashes with fast message-digest algorithms like MD5 or SHA.

[ Parent | on HN ]

Re:How crackers ransack passwords like “qeadzcwrsfxv1331” by qu4z-2 on Wednesday May 29, 2013 @09:34PM (#5790394)

I dunno... in the example there, I'd say that it costing 16000x as much to crack the passwords would be a little more than a "roadbump". (assuming people are renting {C,G}PUs in the cloud to perform the attacks)

[ Parent | on HN ]