4 ms·
> so why would anyone use it Because once you salt it (use a different salt for each hash, which solved your collision issue) and purposely slow it down (throu
by penagwin 6y ago
> so why would anyone use it
Because once you salt it (use a different salt for each hash, which solved your collision issue) and purposely slow it down (through multiple rounds,etc) it effectively ruins precomputing the hashes because of how many permutations there are.
Of course this depends on which hashing algorithm you use. Md5? You can do millions a second. Bcrypt? You can make one hash take 100ms, that’s 10a second. They also use a random salt for each hash - so precomputed hashes will only work for that hash.
The issues you highlighted are very real for md5, but there’s a reason md5 is not recommended for passwords.