3 ms·
You shouldn't be using any of the functions on that page directly, anyway: http://throwingfire.com/storing-passwords-securely/#notpasswordhashes http://throwing
by thirsteh 13y ago
You shouldn't be using any of the functions on that page directly, anyway: http://throwingfire.com/storing-passwords-securely/#notpasswordhashes http://throwingfire.com/storing-passwords-securely/#notpassw...
- zanny 13y agoBut it does matter, because if you can exploit a weakness in the hash function you can figure out the salt, strip it, and then use your precomputed dictionary.
- deleted 13y ago[deleted]
- thirsteh 13y agoThat's not really how it works. Either way, you shouldn't be using just a regular "hash function" anyway. Even basic constructions like PBKDF2 use HMAC constructions where SHA1 and even MD5 are still pretty safe to use (although not very computationally expensive.)