3 ms·
Timings are going to be completely dependent on the server. Anything I tell you will be wrong unless you're running on my server. And I didn't test any SHA-x
by stevelosh 16y ago
Timings are going to be completely dependent on the server. Anything I tell you will be wrong unless you're running on my server.
And I didn't test any SHA-x algorithms. Any algorithm that has a time you can't easily increase by tweaking a number (BCRYPT_ROUNDS) will eventually become insecure as computers get faster.
- JoachimSchipper 16y agoIt's not straight SHA-x, I'd wager; glibc includes a version of phk's MD5-based crypt() based on SHA2 (with some bonus insanity thrown in; it's a spawn of MD5 crypt and Drepper, after all.) Like md5crypt, this new crypt() is not based on established cryptographic principles.