>>> Each 4U FPGA cracker is capable of 2.1 million bcrypt hashes per second, while consuming just 585 watts. That's really not a lot considered the investment.

>>> Each 4U FPGA cracker is capable of 2.1 million bcrypt hashes per second, while consuming just 585 watts. That's really not a lot considered the investment. A similar effort to crack SHA hashes would do trillions per second on CPU/GPU, or quadrillions per second on dedicated FPGA. It is a testament to bcrypt success that it is able to slow down an attack by 5 to 10 orders of magnitude. The lesson is unfortunately, that short passwords like 6 character long or common passwords in a top 1 million list can never be safe from cracking, no matter the algorithm.