Skip to main content
2 of 2
added 1 character in body
erickson
  • 1.8k
  • 11
  • 13

Because hashing is iterative, if the attacker doesn't know the number of rounds, they can compare the current result after each iteration to the target (stopping at some large limit like 216–218).

This approach falls squarely in "security through obscurity" territory, and undermines the purpose of iterating the hash.

erickson
  • 1.8k
  • 11
  • 13