News for hackers. Stuff that matters.

A comment on Can you trust Paul Graham with your password?. Parent comment

Re:Can you trust Paul Graham with your password? by umbrae on Friday May 08, 2009 @11:33PM (#600688)
Isn't there some evidence that hashing a hash is cryptographically weaker?
[ Parent | on HN ]
Re:Can you trust Paul Graham with your password? by rythie on Sunday May 10, 2009 @06:06PM (#602570)
Yes it is probably slightly weaker. It would be weaker if there are collisions in the 1-16 character password space for sha1 (assuming a 16 character limit on the password).

My point was that if you already have a lot hashed passwords then you need a way to transition to salted ones and this was a method to do that.

[ Parent | on HN ]