why not just throw a hash function in the middle? technically you're not increasing the search space for a brute-force attack (but that's not the goal), but you are probably slightly increasing entropy. and most of all, you avoid bad PR like this. :)
that said, it's probably still quite expensive and this PR isn't that bad.
Comments
why not just throw a hash function in the middle? technically you're not increasing the search space for a brute-force attack (but that's not the goal), but you are probably slightly increasing entropy. and most of all, you avoid bad PR like this. :)
that said, it's probably still quite expensive and this PR isn't that bad.
http://benlog.com/articles/2008/06/19/dont-hash-secrets/
Interesting post. But it doesn't make the case that the title promises.