3 ms·
Why isn't it acceptable to normalise the password and then hash it, compared to just hashing it?
by GuiA 14y ago
Why isn't it acceptable to normalise the password and then hash it, compared to just hashing it?
- deleted 14y ago[deleted]
- frio 14y agoBecause the search space for brute-forcing a password is massively reduced :). Suddenly, instead of having 62 possibilities per password character (assuming alphanumeric + no specials), there's only 36. Whereas a password like "PassWord123" might have gotten past a wordlist (well, that's unlikely, but...), "password123" certainly wouldn't.
- GuiA 14y agoThanks!