10 ms·
It seems to be looking for exact matches only, so a linear search against the entire user list should be fine, and should quite comfortable be adequate even for
by jstanley 9y ago
It seems to be looking for exact matches only, so a linear search against the entire user list should be fine, and should quite comfortable be adequate even for thousands of users, depending on hashing algorithm.
- joshuahutt 9y agoBut the rest of the passwords wouldn't be in plain text...
- jstanley 9y agoBut you know the password that has just been entered. Iterate over every hashed password. Hash the plaintext password you know, using the salt from the hashed password. If it's a match, record that the 2 users matched. Loop to next hashed password. If they were plaintext it wouldn't need a linear search because the column could be indexed.
- scoot 9y agoHashed and salted.