undefined | Better HN

0 pointsgpawl8y ago0 comments

longer passwords don't hash to longer values (within any reasonable variation of order of magnitude in input size). That would defeat the purpose of hashing

0 comments

squeaky-clean8y ago

But a longer password would require more combinations for similarity than a short password.

gpawlOP8y ago

Ah. Thanks for clarifying.

Still, permutations longer hashes don't require substantially more space. Password storage is a completely trivial fraction of total storage -- Compare to a single photo, or a video!

And further still, they don't need to _store_ all the hash variations

https://security.stackexchange.com/questions/53481/does-face...

squeaky-clean8y ago

Wow, it slipped my mind entirely that you could do the permutations when you create the new password but before verifying, rather than after creating a password. That's a great idea, and embarrassingly obvious in retrospect.

kbenson8y ago

Yes, that's the point being made.

j / k navigate · click thread line to collapse

0 comments

squeaky-clean8y ago

But a longer password would require more combinations for similarity than a short password.

gpawlOP8y ago

Ah. Thanks for clarifying.

Still, permutations longer hashes don't require substantially more space. Password storage is a completely trivial fraction of total storage -- Compare to a single photo, or a video!

And further still, they don't need to _store_ all the hash variations

https://security.stackexchange.com/questions/53481/does-face...

squeaky-clean8y ago

kbenson8y ago

Yes, that's the point being made.

j / k navigate · click thread line to collapse