From: james.mclean@gmail.com
To: pgsql-docs@postgresql.org
Subject: Hashing speeds
Date: Wed, 14 Dec 2016 00:33:36 +0000
Message-ID: <20161214003336.14892.67118@wrigleys.postgresql.org> (raw)
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-docs>
The following documentation comment has been logged on the website:
Page: https://www.postgresql.org/docs/9.6/static/pgcrypto.html
Description:
The recent updates to the relative hashing speed table is welcomed; however
it should be outlined that dedicated hashing rigs (such as GPU-based hashing
solutions) are MUCH faster than the speeds provided in the table performed
on commodity hardware with a CPU only. A high end GPU rig can hash MD5 for
example at 500 GH/sec (500 billion hashes per second), completing the entire
A-Za-z0-9 keyspace in 4 seconds.
While these rigs are obviously not commonplace, they can be assembled by any
attacker who is sufficiently motivated (and financed) to break a hash.
Rainbow tables also apply to any unsalted hash, negating the need for a GPU
hashing rig.
Example benchmark of a high end GPU hashing system:
https://gist.github.com/epixoip/a83d38f412b4737e99bbef804a270c40
--
Sent via pgsql-docs mailing list (pgsql-docs@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-docs
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-docs@postgresql.org
Cc: james.mclean@gmail.com
Subject: Re: Hashing speeds
In-Reply-To: <20161214003336.14892.67118@wrigleys.postgresql.org>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox