Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Won't you add a seed before hashing. With a 8 byte seed that's 16 effective characters, probably impossible to crack.


By seed you mean salt. Salts are stored in plaintext, so they don't increase the entropy of the password. Instead they make it so that each password hashes uniquely so that everyone with the same password gets different hashes. They also mitigate rainbow tables by effectively requiring the attacker to create a rainbow table per target


Yes I meant salt! AFAIK such a fast cracking of hashes is mostly via rainbow tables, salts defeat those easily.


I'm not sure what you mean by a seed. If you mean a salt, that's no more secret than the hash. It has the effect of requiring you to crack each hash separately, but doesn't make it any harder to crack an individual hash.


You add a salt, which is stored plaintext alongside the password.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: