The title of the article should really be changed to
&quot;How we cracked millions of Ashley Madison passwords by bypassing their strong bcrypt hashes because they thought they were clever&quot; but that&#x27;s less clickbaity<p>Also, never ever roll your own encryption - it will be flawed (unless you employ at least 3 crypto experts and get it peer reviewed - and even then it&#x27;s probably still flawed).