Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I think this is why one is supposed to use random salts per password. That way, you can't use the successfully-guessed password's hash to assume other passwords with the same hash represent the same clear-text password.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: