Hacker News new | past | comments | ask | show | jobs | submit login

Salting a password doesn't make it uncrackable, it just makes it impervious to rainbow tables and other parallel attacks because it forces the attacker to recalculate the hash for every guess for every user account. You can certainly still run a mangled dictionary attack on a salted database, it will just take a lot longer.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: