3 ms·
Getting them to iterate over the range of the KDF is enough, isn't it?
by taejo 13y ago
Getting them to iterate over the range of the KDF is enough, isn't it?
- jessaustin 13y agoWell I guess if the range is large enough it might not be feasible. But the hypothetical system is not rate-limiting (if it were, doing the KDF server-side wouldn't be a big deal), and it is not storing an individual salt, so time is the only thing standing in the way of this attack.
- taejo 13y agoTime is the only thing standing in the way of any attack (well, time and memory, I guess)