Timeline for Why do people think that this is bad way to hash passwords?
Current License: CC BY-SA 3.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 7, 2013 at 5:22 | comment | added | oliland | @dvhh from the article: "bcrypt is an adaptive password hashing algorithm which uses the Blowfish keying schedule, not a symmetric encryption algorithm." | |
| Mar 9, 2012 at 5:51 | comment | added | dvhh | @Ramhound old topic, but with today's computers it is possible to compute hash fast enough for a dictionary or brute force attack, there is even precomputed tables to test against non salted passwords. So yes it cannot be reversed, but if you are motivated enough, you can find out the input that match the md5 fast enough. | |
| Mar 8, 2012 at 18:15 | comment | added | Ramhound | @dvhh - a MD5 cannot be reversed. | |
| Jul 25, 2011 at 2:22 | comment | added | dvhh | using a reversible symmetric-key algo to encrypt your password is almost as bad as storing data in plaintext. As if you've compromised the server, there is a good chance that that you've compromised the code/key to decipher data. | |
| Jul 24, 2011 at 15:51 | comment | added | genesis | even 19 * 36 ^ 32 combinations + unknown lenght, characters, salt in last md5 hash is bad? | |
| Jul 24, 2011 at 15:43 | history | answered | oliland | CC BY-SA 3.0 |