Hashing speeds

From: james(dot)mclean(at)gmail(dot)com
To: pgsql-docs(at)postgresql(dot)org
Subject: Hashing speeds
Date: 2016-12-14 00:33:36
Message-ID: 20161214003336.14892.67118@wrigleys.postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-docs

The following documentation comment has been logged on the website:

Page: https://www.postgresql.org/docs/9.6/static/pgcrypto.html
Description:

The recent updates to the relative hashing speed table is welcomed; however
it should be outlined that dedicated hashing rigs (such as GPU-based hashing
solutions) are MUCH faster than the speeds provided in the table performed
on commodity hardware with a CPU only. A high end GPU rig can hash MD5 for
example at 500 GH/sec (500 billion hashes per second), completing the entire
A-Za-z0-9 keyspace in 4 seconds.

While these rigs are obviously not commonplace, they can be assembled by any
attacker who is sufficiently motivated (and financed) to break a hash.
Rainbow tables also apply to any unsalted hash, negating the need for a GPU
hashing rig.

Example benchmark of a high end GPU hashing system:
https://gist.github.com/epixoip/a83d38f412b4737e99bbef804a270c40

Browse pgsql-docs by date

  From Date Subject
Next Message James McLean 2016-12-14 01:30:15 Correction: Hashing speeds
Previous Message Abdüsselam GÜNDOĞDU 2016-12-13 12:01:09 How To Install PostgreSQL 9.6 on Debian 8