Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1Vq890-0005HB-N0 for pgsql-docs@arkaria.postgresql.org; Mon, 09 Dec 2013 21:13:34 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.80) (envelope-from ) id 1Vq890-0007dG-7V for pgsql-docs@arkaria.postgresql.org; Mon, 09 Dec 2013 21:13:34 +0000 Received: from makus.postgresql.org ([2001:4800:7903:4::125]) by malur.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1Vq88z-0007dA-Kc for pgsql-docs@postgresql.org; Mon, 09 Dec 2013 21:13:33 +0000 Received: from momjian.us ([72.94.173.45]) by makus.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1Vq88x-0007na-1Y for pgsql-docs@postgresql.org; Mon, 09 Dec 2013 21:13:33 +0000 Received: from bruce by momjian.us with local (Exim 4.72) (envelope-from ) id 1Vq88w-0001WQ-HS; Mon, 09 Dec 2013 16:13:30 -0500 Date: Mon, 9 Dec 2013 16:13:30 -0500 From: Bruce Momjian To: Miles Elam Cc: pgsql-docs@postgresql.org Subject: Re: pgcrypto docs Message-ID: <20131209211330.GB2119@momjian.us> References: <4820.1367964343@sss.pgh.pa.us> <20131204174208.GF17114@momjian.us> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20131204174208.GF17114@momjian.us> User-Agent: Mutt/1.5.20 (2009-06-14) X-Pg-Spam-Score: -1.9 (-) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-docs Precedence: bulk Sender: pgsql-docs-owner@postgresql.org On Wed, Dec 4, 2013 at 12:42:08PM -0500, Bruce Momjian wrote: > On Tue, May 7, 2013 at 03:47:43PM -0700, Miles Elam wrote: > > Personally I've found the relative times instructive, merely outdated. Perhaps > > using md5 as a baseline and evaluating estimates relative to that baseline? > > > > md5 = 1 > > sha1 = 4 > > crypt-des = 7 > > crypt-md5 = 1,000 > > crypt-bf/5 = 12,500 > > crypt-bf/6 = 25,000 > > crypt-bf/7 = 50,000 > > crypt-bf/8 = 100,000 > > > > This way, with the caveat that performance will vary from machine to machine, > > there is a sense of the relative costs of using each algorithm, which does not > > change as wildly with time. It lets people know how bad md5 and sha1 are for > > protecting passwords et al. It also demonstrates that each turn of blowfish in > > this module effectively doubles the time needed to crack and halves the number > > of hashes one can perform. > > > > In short, I'd hate for the baby to be thrown out with the bathwater. > > I have used your new testing times, plus added these relative > measurements, which shoud give us the best of both worlds. Patch > attached; you can see the results here: Patch applied. Thanks. I updated the patch to say Intel i3.. -- Bruce Momjian http://momjian.us EnterpriseDB http://enterprisedb.com + Everyone has their own god. + -- Sent via pgsql-docs mailing list (pgsql-docs@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-docs