4 ms·
It would effectively be a dead giveaway. Exhaustively searching all combinations of three characters takes trivial time even in an excruciatingly slow hash.
by ryan-c 10y ago
It would effectively be a dead giveaway. Exhaustively searching all combinations of three characters takes trivial time even in an excruciatingly slow hash.
- tajen 10y agobut it prevents MitM spying.
- admax88q 10y agoHashing passwords is not done to prevent MitM, it's done to prevent/delay password disclosure if the database is hacked.
- whiteandnerdy 10y agoEntering partial passwords prevents MITM. OP was just explaining how partials could be implemented securely by hashing each combination; he wasn't saying hashing prevented MITM.
- stouset 10y agoSo does TLS, without the ridiculous downsides.