Password hash settings

  • Choose
  • Lock 05

Difficulty 3 of 5

Customers sign in at 20 logins/s, and at 60 logins/s from 0:10, on one auth box with 2 vCPU and 4 GB. A thief has a copy of the password table. Pick the hash settings. Keep login p99 under 500 ms. One attacker core may test at most 100 guesses/s.

Play level

Options

  • SHA-256 with a salt
  • Argon2id, 1 GB, 2 s
  • Argon2id, 19 MB, 25 ms
A token bucket on guessesDrag or use arrow keys to change the limit

Goals and limits

Throughput (Guesses)
under 100 req/s
p99 latency (Logins)
under 500 ms
Availability (Logins)
at least 99.9%
Monthly cost
under 60 USD/mo
Traffic
20 req/s

Concepts

How players did

Player results load from the server.

All levels