3 ms·
Why must it be stored in clear? Why not encrypted rather than hashed? That still allows password retrieval. Of course encrypted data is only as secure as the DB
by andrewbadera 17y ago
Why must it be stored in clear? Why not encrypted rather than hashed? That still allows password retrieval. Of course encrypted data is only as secure as the DB and keys/decryption code ...
- run4yourlives 17y agoEven AES 256 is breakable. Even then, now you're worried about not just the message value, but the key as well. All for what? The convenience of letting a user keep the same password they already forgot? A hash with a salt works perfectly fine for 99% of all situations with very little downside.
- niyazpk 17y ago>> Even AES 256 is breakable Can you elaborate on this?
- run4yourlives 17y agoSure: http://en.wikipedia.org/wiki/Advanced_Encryption_Standard#Security http://en.wikipedia.org/wiki/Advanced_Encryption_Standard#Se...