DAHash: Distribution Aware Tuning of Password Hashing Costs

Wenjie Bai, Jeremiah Blocki

An attacker who breaks into an authentication server and steals all of the cryptographic password hashes is able to mount an offline-brute force attack against each user's password…