2 ms·
No, they only need to store a single hashed password. For authentication they can just try out the other 2 transformations above and see if any of them matches
by scg 14y ago
No, they only need to store a single hashed password. For authentication they can just try out the other 2 transformations above and see if any of them matches what's on file.
- dewiz 14y agothereis no multiple transformations, they just lcase every pwd input before hashing. the stored hash is a the hash of the lcase pwd.