BCrypt + GTX670 = 6 c/s?

[wflme]

wow, the cost parameter is 12!? that's excessive, but certainly explains the slow speed. that means it is doing 4096 iterations, versus the 32 iterations that we benchmark against.

So yet again, I'm royally fucked, am I?

Also, any idea what kind of processing power does it take to encrypt it for thousands of users and if it's that easy, why is everyone still using (possibly salted) md5? Okay, because CMS and commercial software. Why don't they?

I do remember the UNIX transfer from world-readable /etc/passwd with DES encrypted passwords (no concept of /etc/shadow back then. Kerberos). Then they moved to /etc/shadow and still used DES. Then we learned that MD5 is not much better than DES.

Then I stopped being a UNIX sysadmin.

Besides the point, but felt like contributing. Yay.