3 ms·
I guess they don't know what they're doing. You never want your password storage function to have slow code. You want it to require computational power in gener
by MichaelGG 10y ago
I guess they don't know what they're doing. You never want your password storage function to have slow code. You want it to require computational power in general, not to needlessly burn your own CPUs.
Making your version of bcrypt slow just means your use slows down. An attacker isn't going to use the broken version.
- mrob 10y agoThere's a ";)" smiley in the commit message so it's not the real reason. But I think they should have said the real reason, because lots of people are going to miss the ;) and quote them without it.
- benchaney 10y agoI would consider putting deliberately misleading information in the comment of a git commit as "they don't know what they are doing", but that is just me.