3 ms·
> capable of 2.1 million bcrypt hashes per second, Shouldn't this wildly depend on the bcrypt hash's work factor?
by cj 6y ago
> capable of 2.1 million bcrypt hashes per second,
Shouldn't this wildly depend on the bcrypt hash's work factor?
- tialaramex 6y agoYou are correct, and in the source post we find it assumes work factor 5 (32 iterations) whereas the same source says most web sites choose between 7 (128 iterations) and 14 (16384 iterations). This is apparently because "benchmarks" tend to choose 5. But since sites don't actually use that work factor you should modify your assumptions appropriately.