[Orthogonally to client-side hashing] Using a hardware one-way function you can ensure that even if your database is breached or disclosed, attackers cannot br

[Orthogonally to client-side hashing] Using a hardware one-way function you can ensure that even if your database is breached or disclosed, attackers cannot brute-force outside of your environment (e.g. the hashed are “anchored” to your systems). You can construct such a function using something like CloudHSM (pity that KMS cannot be coaxed to be deterministic or you could use that). All you need is an encrypt operation with no corresponding decrypt or way to extract the key. I’m surprised that more large online services don’t use anchoring.