3 ms·
SHA-3 is supposed to be fast. Do not use SHA-3 for password storage! Use a key-stretching password hash function e.g. bcrypt or scrypt. (These take a fast ha
by willvarfar 9y ago
SHA-3 is supposed to be fast.
Do not use SHA-3 for password storage!
Use a key-stretching password hash function e.g. bcrypt or scrypt.
(These take a fast hash or encryption function and apply it many many times, to make the total work be slow.)
- dragontamer 9y agoYou're technically wrong, but your concept is right. BCrypt and SCrypt are originally designed to be slow. PBKDF2 is the function that takes a fast hash function and applies it many times to make it slow.
- deleted 9y ago[deleted]
- snakeanus 9y agoOr Argon2 as it fits the theme of the SHA-3 competition better (using chacha20 internally, similar to the BLAKE candidate).