2 ms·
The CPU usage difference between a hash on 20 bytes vs 100 (assuming ASCII) can't be that bad, can it?
by colejohnson66 5y ago
The CPU usage difference between a hash on 20 bytes vs 100 (assuming ASCII) can't be that bad, can it?
- patrakov 5y agoWe are not talking about 100 bytes of password here, but megabytes of garbage. See https://www.djangoproject.com/weblog/2013/sep/15/security/ https://www.djangoproject.com/weblog/2013/sep/15/security/, also known as CVE-2013-1443. "A password one megabyte in size, for example, will require roughly one minute of computation to check when using the PBKDF2 hasher."