6 ms·
Highly recommend using Argon2id/Argon2d/scrypt/bcrypt/PBKDF2 (in that order of preference) for password authentication/"storage." While SHA-3 might be slower th
by patrickmn 9y ago
Highly recommend using Argon2id/Argon2d/scrypt/bcrypt/PBKDF2 (in that order of preference) for password authentication/"storage." While SHA-3 might be slower than other fast hash functions, it's not at all designed for the same purpose. Functions suitable for password authentication are not merely CPU-intensive, but also memory-intensive.
Shameless plug: https://patrickmn.com/security/storing-passwords-securely/#notpasswordhashes https://patrickmn.com/security/storing-passwords-securely/#n...