3 ms·
Yeah, if you're trying to guard against brute force attacks, having a hash that takes one second to generate seems like it would be pretty effective. Maybe not
by pkulak 6y ago
Yeah, if you're trying to guard against brute force attacks, having a hash that takes one second to generate seems like it would be pretty effective. Maybe not against an attacker with nearly unlimited computing resources, but then again, what really can stand up to that?
EDIT: No, I'm not really right about this, as explained here: https://news.ycombinator.com/item?id=25011716 https://news.ycombinator.com/item?id=25011716
- warkdarrior 6y agoThe hash they chose takes one second on their host. bcrypt and scrypt provide better guarantees in terms of computation complexity.