2 ms·
Salts won't give you that much greater security these days. Password-cracking GPGPU hardware is already well into the consumer domain. Using a pair of AMD's HD
by iwwr 16y ago
Salts won't give you that much greater security these days. Password-cracking GPGPU hardware is already well into the consumer domain. Using a pair of AMD's HD 5970, you can get cranking to just over 1bn SHA256 hashes/s.
- MichaelGG 16y agoDoesn't salting and iterative hashing pretty much stop rainbow tables? Didn't they find the passwords via a rainbow table?
- iwwr 16y agoYes, they stop rainbow tables, but not GPGPU crunchers like the HD 5970. Moore's law is catching up rather fast at the moment.
- stcredzero 16y agoYou can still maximize the time and expense of an attack with salts and rainbow tables. (and bcrypt)