On: Salted Password Hashing - Doing it Right

[pjscott]

I'm confused. That combination of SHA1 and MD5 is, itself, a hash function, and should be brute-forceable using the exact same methods you would use to brute force any other hash function. It's also easy to GPU-accelerate.

[ben0x539 → pjscott]

I think the meaning was that combining SHA1 and MD5 is not an appropriate method to circumvent brute-forcing.