[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <73971AE4-F5DC-4316-BCBC-66CD64D58E78@patpro.net>
Date: Fri, 21 Aug 2015 14:08:27 +0200
From: Patrick Proniewski <patpro@...pro.net>
To: john-users@...ts.openwall.com
Subject: Re: Anyone looked at the Ashley Madison data yet?
Hi,
On 21 août 2015, at 14:03, Albert Veli wrote:
> Bcrypt is so slow it is impossible to work with a list that big. But it is
> possible to split it into, say 1000 hashes per file. With a short list,
> like this:
> https://github.com/danielmiessler/SecLists/blob/master/Passwords/top_shortlist.txt
> it still takes half an hour to just try these 26 words... And for 36
> million hashes, you get 36000 files with 1000 hashes in each. I get dizzy
> just thinking about the amount of work it would take to just try the
> shortlist.
Is there any reason why most people seem using weaker hash than Bcrypt to store passwords in their apps/web site/other ?
patpro
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
