Edit: Actually, the slower hashing algorithm is even better because it can’t be parallelized.
That’s true when you’re checking one password, but a slower hashing algorithm doesn’t stop you from checking multiple passwords at once (which is something you do when cracking passwords but not when authenticating them). Still, it’s something I haven’t thought about, so thanks for pointing that out.
That’s true when you’re checking one password, but a slower hashing algorithm doesn’t stop you from checking multiple passwords at once (which is something you do when cracking passwords but not when authenticating them). Still, it’s something I haven’t thought about, so thanks for pointing that out.