aeris22’s avataraeris22’s Twitter Archive—№ 21,660

  1. …in reply to @csprngoutput
    @voodooKobra @zooko And this is what I say on the first tweet. « slowest is the best » is true only for offline-attack.
    1. …in reply to @aeris22
      @voodooKobra @zooko But offline-attack is not only password hashing. It’s digital signature and download integrity check too.
      1. …in reply to @aeris22
        @voodooKobra @zooko The only usage where speed is important is when hashing is frequent, like integrity verification on each TLS message
        1. …in reply to @aeris22
          @voodooKobra @zooko And in most if not all those cases, size of hash is to take into account too. SHA-1 is perfectly good and fast here.