4 ms·
The other solution (that Yahoo used) is use bcrypt(md5(password)) which allows them to rehash all existing passwords without logging in.
by HappyTypist 10y ago
The other solution (that Yahoo used) is use bcrypt(md5(password)) which allows them to rehash all existing passwords without logging in.
- blauditore 10y agoI think that's what he described, plus adding a prefix in order to indicate it's been re-hashed.
- syncsynchalt 10y agoThat's exactly right, thank you!