3 ms·
> GSHA will almost certainly give up collisions than SHA, but collisions are not a practical concern for password hashing or KDF operations. Pretty sure collis
by kngspook 12y ago
> GSHA will almost certainly give up collisions than SHA, but collisions are not a practical concern for password hashing or KDF operations.
Pretty sure collisions are a practical concern for password hashing... More collisions = more "valid" passwords for a given account.
- tomp 12y agoBut if the cost of finding any of the "valid" passwords increases faster than the number of "valid" passwords (collisions), it's still worth it.