I'm very open to correction, but won't the increased time complexity of bcrypt also mitigate this kind of attack?