Just take the string as bytes and hash it ffs

  • blackstrat@lemmy.fwgx.uk
    link
    fedilink
    English
    arrow-up
    1
    ·
    3 months ago

    The resulting hash will always be the same size, but you don’t want to have an unlimited upper bound otherwise I’m using a 25GB blueray rip as my password and your service is going to have to calculate the hash of that whenever I login.

    Sensible upper bounds are a must to provide a reliable service not open to DDOS exploits.