4 ms·
> But the question still stands - is asymmetric encryption strong and secure enough to take place of hashing, assuming the private key is secured? It should be
by mkj 11y ago
> But the question still stands - is asymmetric encryption strong and secure enough to take place of hashing, assuming the private key is secured?
It should be (though it's a big "assuming"). Being able to quickly move away from an older less secure hashing scheme rather than waiting for users to log in could be a security advantage too.
- VincentEvans 11y agoThere's a couple of us here watching the replies to this - as this has been our concern for a while and this is a great opportunity for us to get some feedback. Thank you for your reply. Interesting point about it being an advantage. I am actually going to make a note of this. One way of handling the private key that i proposed - was to use a privileged access vault like Thycotic. Or just have it on a USB key in a lockbox.