Thread

1. bootlooped · 1790984162 · focus · HN ↗

   My biggest question here is are they not just feeding the input into a hash function, why can't it be longer than 20 characters?

   1. arkadiyt · 1790984385 · focus · HN ↗

      bcrypt famously only looks at the first 72 bytes of the input. There are ways around that - don't use bcrypt, or do bcrypt(sha256(password)), or whatever, but it is not the case that "just feed the input to the hash" removes all length restrictions

Unofficial Hacker News client; not affiliated with Y Combinator.