4 ms·
Has bcrpyt become the node standard? There's no mention of pbkdf2, which I thought was NIST's current recommendation.
by davidmurdoch 9y ago
Has bcrpyt become the node standard? There's no mention of pbkdf2, which I thought was NIST's current recommendation.
- cyphar 9y agobcrypt is a hashing algorithm, pbkdf2 is a key derivation function. Am I missing something?
- tracker1 9y agopbkdf2 can be used as a computationally expensive hash... bcrypt does a few other things in terms of the output format beyond just the hash though, it contains enough information to repeat the hashing settings to verify another entry against it. IIRC bcrypt isn't an in-the box feature in crypto, but pbkdf2 is.