Just take the string as bytes and hash it ffs

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 2 years ago

There's a more practical limit. Using US standard keyboard symbols, a 40 char password is about as secure as a 256-bit block cipher key. That's impossible to break due to thermodynamic limits on computing.

The reason to put a high char limit is to mitigate DoS attacks. It can still be a few hundred chars.

  • source
  • parent