Hacker News new | ask | show | jobs
by AstralStorm 322 days ago
It's written with constant memory allocation in mind. Silly of them to use such a small buffer though, make it a configuration option.
2 comments
mras0 321 days ago
No, it's due to the construction of bcrypt - it ends up using the password more or less directly as the key for blowfish (the underlying cipher) which is why the limit is there. Check wikipedia for details.
link
nothrabannosir 321 days ago
I assumed all hashes are in O(1) space? Is there any that’s not?
link