[plug] Is Red hat truly flawed?

Christian christian at amnet.net.au
Wed May 3 10:46:07 WST 2000


On Wed, May 03, 2000 at 10:21:32AM +0800, Scott, Simon wrote:
> And again (someone asked before I believe), what is stopping someone from
> 'bcrypting' their dictionary and getting the easy passwords? Am I wrong in
> assuming that in this circumstance it is as secure as any other
> non-reversible hash function?

I just answered this question.  When you get yourself a 1.7 x 10^31
GIGABYTE storage device then let me know.  You'll be able to store
hashes for ONE bcrypt()'d password.



More information about the plug mailing list