4 ms·
Not a cryptographer, so this may be harebrained: Would someone who has access to all 4 hashes be more able to crack said hashes than if they only stored one?
by clubm8 10y ago
Not a cryptographer, so this may be harebrained:
Would someone who has access to all 4 hashes be more able to crack said hashes than if they only stored one?
(Or would they salt each hash with a different salt to negate this?)
- rcar 10y agoYes, it would reduce the search space three-fold (the 4th mechanism uses the same stored hash as the 1st), and your suggestion of different salts would prevent that since each password variant would need a separate search. Still, the difference between looking for 3 things out of ~10^20 options vs. just 1 thing is not that big.