3 ms·

But then what would they match it against?

• jstanley 9y ago
  It seems to be looking for exact matches only, so a linear search against the entire user list should be fine, and should quite comfortable be adequate even for thousands of users, depending on hashing algorithm.
  • joshuahutt 9y ago
    But the rest of the passwords wouldn't be in plain text...
    • jstanley 9y ago
      But you know the password that has just been entered. Iterate over every hashed password. Hash the plaintext password you know, using the salt from the hashed password. If it's a match, record that the 2 users matched. Loop to next hashed password. If they were plaintext it wouldn't need a linear search because the column could be indexed.
      • scoot 9y ago
        Hashed and salted.