3 ms·
Postgres bcrypt is wicked fast. You need some crazy load before it makes sense to move hashing out of the DB.
by rpedela 10y ago
Postgres bcrypt is wicked fast. You need some crazy load before it makes sense to move hashing out of the DB.
- Xylakant 10y agoIf your PW hashing function is wicked fast, you need to increase the work factor. The whole idea of a paw hash is to be comparatively slow, because that's one property that makes it harder to crack. Otherwise we could all go back to salted md5
- jeltz 10y agoPlease change to a higher factor. PostgreSQL's default is a bit outdated and too low for modern computers.