4 ms·
Forgive me if I'm missing something obvious, but if I brute force one hashed version of a password (and recovered the plaintext version), then what difference w
by gingerlime 10y ago
Forgive me if I'm missing something obvious, but if I brute force one hashed version of a password (and recovered the plaintext version), then what difference would it make that other servers have it hashed differently? I already know the actual password...
- viraptor 10y agoActually waiting for the TTL to run out and requesting a new password reveals more information than one hash would. Shouldn't matter in case of perfect hash algorithm, but in practice...
- cryptarch 10y agoI think it's meant to defend against collisions that don't produce the actual password, but some other value which hashes to the correct value.