2 ms·
whereas your idea is just some random thing you thought up He might also have got the idea from one of tptacek's suggestions not long ago. The difference betw
by ErrantX 17y ago
whereas your idea is just some random thing you thought up
He might also have got the idea from one of tptacek's suggestions not long ago.
The difference between doing the iterations and bcrypt is.. well.. not massive in a practical sense. You could do either (if your already MD5'ing passwords once [hmmmm], for example, then it is a quicker solution)
- tptacek 17y agoThere's a difference: bcrypt (and moreso scrypt) were designed to be hard to speed up, while SHA1 was designed at least in part to be easy to speed up. But in practical terms, "stretched" SHA1 is fine. I won't bitch at anyone for using it.