Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I don't think that's an issue when your comparing salted passwords. AKA F('Passsword') = Hash('Passsword' xor 'some value') = "123456"

F("value") > "123455" which is close, but that does not let you get a 'better' guess.

PS: Assuming the Salt is hidden, and the Hash is secure.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: