4 ms·
If you know the length of a user's password, it narrows the search space considerably.
by brianberns 12y ago
If you know the length of a user's password, it narrows the search space considerably.
- tedunangst 12y ago1. Please don't store raw passwords and compare them with strcmp(). 2. Less than you'd think. e.g., the total count of all 1 and 2 and 3 digit numbers is only 11% of the count of 4 digit numbers. (And that stat gets worse with just lower case letters.) Searching all shorter passwords ends up being an insignificant amount of time compared to searching all correctly sized passwords.
- brianberns 12y agoI agree. Perhaps there's a more practical example?