4 ms·
SHA1..... That's bad Current gpus can hash tens of millions of passwords per second with SHA-1.
by subcosmos 9y ago
SHA1..... That's bad
Current gpus can hash tens of millions of passwords per second with SHA-1.
- Ajedi32 9y agoSome back of the envelope calculations... [A GTX 1080 can do ~8.5 billion hashes/second][1]. An 8-character, truly random password with mixed case, numbers, and symbols has (26 * 2+10+32)^8 possible combinations. That means an attacker with a single GTX 1080 could crack such a password ((26 * 2+10+32)^8/2) / (8538.1 * 10^6)) seconds ([approximately 4 days][2]) on average. And most user's passwords are most certainly not truly random (i.e. they're significantly weaker than that). [1]: https://gist.github.com/epixoip/a83d38f412b4737e99bbef804a270c40 https://gist.github.com/epixoip/a83d38f412b4737e99bbef804a27... [2]: https://www.wolframalpha.com/input/?i=((26*2%2B10%2B32)%5E8%2F2)+%2F+(8538.1+*+10%5E6))+seconds https://www.wolframalpha.com/input/?i=((26*2%2B10%2B32)%5E8%...
- deleted 9y ago[deleted]
- jedisct1 9y agoFor the record, Bcrypt exists since 1999.