Side channels don't matter for bcrypt. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

tptacek on Feb 4, 2011 | parent | context | favorite | on: Django-bcrypt

Side channels don't matter for bcrypt.

koenigdavidmj on Feb 4, 2011 [–]

Can you explain why this is? (Not doubting you; just curious.)

tptacek on Feb 4, 2011 | [–]

The online operations exposed to an attacker in a bcrypt system are done almost entirely on attacker-known data.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact