3 ms·
> Was also very surprised to see how slow Bcrypt is. Though unlike all the other examples here, this one is actually intentional. If/when computers become cons
by TonyTrapp 3y ago
> Was also very surprised to see how slow Bcrypt is.
Though unlike all the other examples here, this one is actually intentional. If/when computers become considerably faster, the cost factor of typical bcrypt implementations will be raised so that it stays slow, to keep it difficult to throw brute-force attacks at it.
- jamestimmins 3y agoFor sure, that's an important piece. But when I hear "slow hashing" I assumed it meant 1k-10k times per second, not <10 times per second. That's practically human speed.
- pjscott 3y ago“Practically human speed” is exactly what they’re aiming for. It’s meant to be used in human-speed applications, and to be as slow as possible in those use-cases without causing perceptible lag.