Hacker News new | ask | show | jobs
by residualmind 1587 days ago
Are you sure thats how evenly distributed hash algorithms work? change one letter of your string, or just make it longer or shorter - none of your green fields will stay.
2 comments

Nothing about this algorithm relies on similar words producing similar hashes. If the word “foobar” has a 0 in the first digit of its hash, and you see a green 1 in the first digit in Passwordle, then you know that the answer can’t be foobar.
> Are you sure thats how evenly distributed hash algorithms work? change one letter of your string, or just make it longer or shorter - none of your green fields will stay.

True. But still, I know the vast majority of words in my dictionary don't match those two green fields after hashing, and can be eliminated from further consideration as the password.

The password is not a dictionary word, it’s randomly generated though?
Yes, it's a randomly generated string with ~90 bits of entropy.

After one guess, I know many fewer of those values could work. Unfortunately, the best known way to test this is to enumerate all of them.

14 character random strings are out of reach; 11 character strings you can enumerate & test them all with a lot of computing.