In addition an ideal password hashing algorithm will be deliberately "slow in order to help mitigate brute-force password guessing attacks.+Some organizations restrict the 1) types of special characters and 2) length of credentials accepted by systems because of their inability to prevent SQL Injection, Cross-site scripting, command-injection and other forms of injection attacks.