3 ms·
That's no bug, its a feature! Seriously though, this is a design decision that cannot be easily solved with any non-reversible encryption. If you were able to
by bradleyland 15y ago
That's no bug, its a feature!
Seriously though, this is a design decision that cannot be easily solved with any non-reversible encryption. If you were able to increase the cost factor, the you'd open the algorithm to attacks that reverse that process.
- daeken 15y agoErr, no, that's actually not true. Take the case of PBKDF2 -- if you apply 1000 rounds of PBKDF2 to password X to get X' then apply 1000 rounds to PBKDF2 to password X' to get X'', applying 2000 rounds of PBKDF2 to password X == X''. You could increase the cost factor (number of rounds) every time the password is used, for instance.