3 ms·
That's just not true. If your salt is 1000 characters long, they will need more energy than the whole universe has to bruteforce it.
by rorrr 16y ago
That's just not true. If your salt is 1000 characters long, they will need more energy than the whole universe has to bruteforce it.
- tedunangst 16y agoExcept anybody playing this game has the salt, there's no need to guess it.
- ent 16y agothe point of adding a salt to the passwords is not to make decrypting the individual passwords harder - the salts are kept in plaintext - but to make it impossible to prevent the use of rainbow tables. that is, having longer salts will only make it harder for finding out all the people with the same password.
- rorrr 16y agoThat's assuming hacker knows the salt, which is not always the case.
- rmc 16y agoMy prediction: After there are loads of MD5 rainbow tables with all the passwords a human could use, people will make rainbow tables with salts. First one byte of salt, then two. Granted this gets exponentially harder, but eventually it'll be close.