4 ms·
Sure it's fast on algorithms that were designed to be fast (SHA1, MD5, various jokes thought up in five minutes, etc). However, what you want to look at is a pr
by tobiasu 13y ago
Sure it's fast on algorithms that were designed to be fast (SHA1, MD5, various jokes thought up in five minutes, etc). However, what you want to look at is a proper method. From the performance table:
bcrypt $2a$ 3788 c/s 1583 c/s 3861 c/s 626 c/s
That will take a while...
- ams6110 13y agoIt's also still attacking based on a lot of assumed patterns. Any passphrase that is a quote from popular literature or movies is bad choice. At this point any grammatically correct phrase is probably a bad choice, as that's a much smaller pool than you get with and handful of truly random words (e.g. as you get with diceware). I hope we see a much stronger push to two-factor auth soon. Even if it's imperfect (e.g. SMS messages) it's still a huge extra hurdle for the typical cracker.