Hacker News new | ask | show | jobs
by rchowe 5468 days ago
But there are rainbow tables, or tables of all of the MD5s/SHA1s/<insert favorite hash algorithm> for arbitrary strings. So the time's already sunk in.

8 days for one password is a very short amount of time comparatively (tiny for a botnet). If you use bcrypt, which you can force a certain complexity on, you can get that amount of time up much higher.

1 comments

Rainbow tables don't work even against amateurish salted hash schemes.