4 ms·
> PBKDF2 (nearly everyone except FIPS agrees this is the worst of the acceptable options) is that true?
by serge2k 11y ago
> PBKDF2 (nearly everyone except FIPS agrees this is the worst of the acceptable options)
is that true?
- tptacek 11y agoOnly in the most technical sense: cycle for cycle, PBKDF2 gets you the smallest amount of protection from that group of password hashes. PBKDF2 is still vastly better than non- password hashes like salted SHA.
- joshreesjones 11y agoYou say that "PBKDF2 is still vastly better than non-password hashes like salted SHA", but is PBKDF2 (with >10,000 iterations using SHA512 and a random salt, for example) secure enough?