Thread: [DOCS] Hashing speeds

[DOCS] Hashing speeds

From
james.mclean@gmail.com
Date:
The following documentation comment has been logged on the website:

Page: https://www.postgresql.org/docs/9.6/static/pgcrypto.html
Description:

The recent updates to the relative hashing speed table is welcomed; however
it should be outlined that dedicated hashing rigs (such as GPU-based hashing
solutions) are MUCH faster than the speeds provided in the table performed
on commodity hardware with a CPU only. A high end GPU rig can hash MD5 for
example at 500 GH/sec (500 billion hashes per second), completing the entire
A-Za-z0-9 keyspace in 4 seconds.

While these rigs are obviously not commonplace, they can be assembled by any
attacker who is sufficiently motivated (and financed) to break a hash.
Rainbow tables also apply to any unsalted hash, negating the need for a GPU
hashing rig.

Example benchmark of a high end GPU hashing system:
https://gist.github.com/epixoip/a83d38f412b4737e99bbef804a270c40