Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Why I Don't Recommend Scrypt (2014) (ircmaxell.com)
6 points by voctor on April 9, 2018 | hide | past | favorite | 1 comment


What kind of threat model are you operating under where a 72 character password is insufficient?

Even if your password consists entirely of lowercase ASCII letters that's still 7.5E101 possible combinations. 20 orders of magnitude more than the number of atoms in the observable universe.




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: