|
|
|
|
|
by lostcolony
2035 days ago
|
|
No, the idea that password hashing should be slow is built into the basic understanding of what password hashing is for and should do. It's just that security wasn't as important (limited web attack surface) or generally understood back in the day (so people were even less likely to ask "is this hash suitable for passwords rather than checksums/indexing/etc?" than they are today), or the slow ones from then were fine -then-, but advances in hardware, the availability of the cloud/GPUs (so massive parallelization without a cost of infrastructure only a nation state could afford), etc, means they're easily compromised today. |
|