4 ms·
It's a chain of hash because that's how passwords were migrated from being stored unsalted, to salted, to scrypted. People sometimes complain that migrating pa
by amenghra 10y ago
It's a chain of hash because that's how passwords were migrated from being stored unsalted, to salted, to scrypted.
People sometimes complain that migrating passwords is a pain, but if you wrap the older scheme with a newer hash* it kind of works out.
Today, I would consider argon2 which came out of PHC.
* you need to carefully study the security properties of the combined hash.
- dsacco 10y ago>> It's a chain of hash because that's how passwords were migrated from being stored unsalted, to salted, to scrypted. I kind of figured that, thanks for confirming :). Personally I wouldn't consider Argon2 yet for production, but only because I'd like to see it run at scale for a few years. PHC or not, I'm hoping it becomes more battle-tested in production use. That said, I'd fully respect any team for using Argon2 and have no personal qualms with it.
- user5994461 10y agoArgon2i and argon2d => bad idea to use that in production (and yes, the researchers made two different algorithms with the same name)