You don't need to know m, just h(m) which is commonly found in database breaches | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

comradesmith on Oct 10, 2019 | parent | context | favorite | on: Ken Thompson's Unix Password

You don't need to know m, just h(m) which is commonly found in database breaches

taejo on Oct 10, 2019 [–]

That's just a "pre-image attack". A "second pre-image attack" is a different scenario, not relevant to password-hashing for the reasons grandparent described, where you already know a pre-image, and must find a different one.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact