Comment on Update on Tuts+ Premium Security BreachparentComments−astrodust14yWhen there's a high-speed bcrypt cracker we will have to stop using bcrypt. Until then the cost of cracking bcrypt is too high to make it practical.SHA1 and MD5 are trivial to crack as there are many OpenCL implementations made specifically to crack salted passwords.−rpsw14yWell, the point of an adaptable work factor is that you can keep increasing the cost to generate the hash. The aim is for bcrypt is to be able beat Moore's law, not just be a short-term stop gap.
Comments
When there's a high-speed bcrypt cracker we will have to stop using bcrypt. Until then the cost of cracking bcrypt is too high to make it practical.
SHA1 and MD5 are trivial to crack as there are many OpenCL implementations made specifically to crack salted passwords.
Well, the point of an adaptable work factor is that you can keep increasing the cost to generate the hash. The aim is for bcrypt is to be able beat Moore's law, not just be a short-term stop gap.