On: What’s in a PR statement: LastPass breach explaine...

[edflsafoiewq]

Assuming you have the password and key, you'd need to brute force hash and masterPasswd. Seems hard.

[palant → edflsafoiewq]

It isn’t. You certainly used MD5, SHA1, SHA256 or SHA512 as hash, with SHA256 being the most likely one. All of these are very easy to bruteforce – if someone has one of your passwords, bruteforcing your master password won’t take all too long.

[edflsafoiewq → palant]

hash(x+const), hash^n(x), etc. are also hash functions.