Daily Byte database export, version 1
Loading database dump...
Run supplied wordlist
Maria's password
Submit password
Daily Byte database export, version 2
Loading database dump...
Run salted wordlist attack
What can Alice and Bob's different hashes tell you?
Choose an answer
Their passwords must be different
Hash inequality no longer reveals whether their passwords match
Their salts must remain secret
Maria's password
Submit findings
Daily Byte database export, version 3
Loading encoded hash...
Algorithm
Version
Memory in KiB
Iterations
Parallelism
Salt, as encoded
Cost comparison
Choose an answer
One Argon2id guess costs the same as one SHA-256 digest
Argon2id deliberately costs more memory and processing per guess
SHA-256 deliberately costs more per guess
Submit parameters
Database-only compromise, version 4
Loading database record...
Can the database dump verify offline guesses by itself?
Choose an answer
Yes
No
Which additional value is required?
Choose an answer
The salt
The algorithm name
The pepper
Submit explanation
Exposed deployment backup
Retrieve application.properties
Pepper from the disclosed configuration
Run bounded attack
Maria's recovered password
Submit password