3 ms·
On salting, the author says that an attacker needs to rebuild the dictionary for each user they attack. But doesn't the attacker only need to rebuild the dicti
by kGrange 13y ago
On salting, the author says that an attacker needs to rebuild the dictionary for each user they attack.
But doesn't the attacker only need to rebuild the dictionary once, using the salt they recovered?
- fywacro 13y agoThe salt is different for EVERY secret. When you hash/store a new password, you randomly generate a salt for THAT password, and you store each salt & password together. Because each salt is ~unique, the attacker must rebuild a separate dictionary for every single stored secret. That's functionally the same as having no dictionary, at all.