2 ms·
Nice link, thanks for sharing that. So, this also is a slightly different situation. If you are an end-user, yes, you can protect your individual password agai
by thaumaturgy 14y ago
Nice link, thanks for sharing that.
So, this also is a slightly different situation. If you are an end-user, yes, you can protect your individual password against stupid hashing schemes by using passwords with lots of entropy. (I use KeePassX for this.)
However, if you are a service provider, you have to protect your users from the stupid passwords that around 30% of them are likely to use and re-use elsewhere, and you do that by using a smart hashing scheme (like bcrypt or scrypt) that makes brute-forcing the passwords an annoying and time-consuming endeavor.