3 ms·
The problem is that you aren't just dealing with "any output from the first hashing algo", since passwords are going into that algo in the first place. A hashin
by jon_richards 9y ago
The problem is that you aren't just dealing with "any output from the first hashing algo", since passwords are going into that algo in the first place. A hashing algo can't add entropy, but collisions can reduce it.
- concede_pluto 9y agoAn undetected I/O error is vastly more likely than even one accidental SHA-256 collision among billions of passwords. It's not quite literally impossible but I'd bet my car I never see it happen.