4 ms·
No, because the salt is stored with the password. Salts are used to defend against reversing a password hash into a password, but they don't appreciably impede
by mpyne 14y ago
No, because the salt is stored with the password. Salts are used to defend against reversing a password hash into a password, but they don't appreciably impede bruteforcing passwords into hashes.
- nwh 14y agoIt does mean that for a large dictionary attack things will go a lot slower. Rather than one computing one hash and comparing it to 50M hashes, the same word must be hashed with 50M different salts and then compared with their respective hashes.
- mpyne 14y agoThat's a more specific way of phrasing reversing the hash into a password, yes. ;)
- hexonexxon 14y agoYou can rent miners on the bitcoin network to use their pooled hashrate to break passwords, same with moxie's service cloudcracker.com
- rmc 14y agoSalts are used to make rainbow tables useless.