On: Project Euler Returns

[SkyMarshal]

A little off topic, but is there any reason to still be talking about salted hashes when we have bcrypt and scrypt these days? Seems like an anachronism.

[sp332 → SkyMarshal]

An attacker can pre-compute hashes of common passwords for common settings of bcrypt/scrypt. With a salt, they have to start from scratch every time.

[jgeralnik → sp332]

bcrypt and scrypt are always salted (it's part of their algorithms - there is not such thing as unsalted bcrypt/scrypt)

[stouset → sp332]

No. No, they cannot.