Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I think what was meant was that they don’t store a second hash in order to allow chopping off a character at the end. I agree with you that they would need to store extra hashes for allowing all-caps and some of the other cases.


No extra hashes needed for an all caps version or inverted case version of a password, just perform those transformations on the user input, hash, and compare the result to the single stored hash.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: