This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.
TL;DR: bcrypt ignores any bytes after the first 72 bytes, this is due to bcrypt being based on the Blowfish cipher which has this limitation. bcrypt has been a commonly used password hashing algorithm for decades, it’s slow by design, includes built-in salting, and has protected countless systems from brute-force attacks. But despite its solid reputation, it also has a few hidden limitations…
Comments
Nothing yet. Say the first thing.
Sign in to join the conversation.