The following documentation comment has been logged on the website:
Page: https://www.postgresql.org/docs/9.6/static/pgcrypto.html
Description:
The recent updates to the relative hashing speed table is welcomed; however
it should be outlined that dedicated hashing rigs (such as GPU-based hashing
solutions) are MUCH faster than the speeds provided in the table performed
on commodity hardware with a CPU only. A high end GPU rig can hash MD5 for
example at 500 GH/sec (500 billion hashes per second), completing the entire
A-Za-z0-9 keyspace in 4 seconds.
While these rigs are obviously not commonplace, they can be assembled by any
attacker who is sufficiently motivated (and financed) to break a hash.
Rainbow tables also apply to any unsalted hash, negating the need for a GPU
hashing rig.
Example benchmark of a high end GPU hashing system:
https://gist.github.com/epixoip/a83d38f412b4737e99bbef804a270c40
