3 ms·
Dumb idea: Have the work factor also be a function of the password itself... this would cause even more difficulty brute-forcing the password, as it means inte
by joshu 16y ago
Dumb idea:
Have the work factor also be a function of the password itself... this would cause even more difficulty brute-forcing the password, as it means intermediate steps would also have to be tested - breaking one weak password doesn't give you any information about other passwords.
- StavrosK 16y agoI'm not sure about the bcrypt implementation, but if the work factor is public (i.e. you have to know it before calculating the hash), this gives you information about the password, which is bad.