Quote:
Originally Posted by jbjb
Sorry for reopening this, but it's clear I haven't made my point well.
The point is that:[LIST][*]generating the rainbow table for a particular salt is about the same effort as brute-forcing one password[*]hence, the point of rainbow tables is that the table can be used against multiple passwords if they use the same salt (i.e., in the real world, if they're unsalted)
|
No, I get it. If salts are random/unique for each hash then there's no practical difference between direct brute force and generating a unique rainbow table for that hash, except that brute force should be faster. Rainbow tables are useful against unsalted hashes or when salts are reused. Then you get two or more for the price of one.