4 ms·
More details about one way to implement this, covering how to deal with nonexistent users: https://download.libsodium.org/doc/password_hashing/#server-relief ht
by jedisct1 9y ago
More details about one way to implement this, covering how to deal with nonexistent users: https://download.libsodium.org/doc/password_hashing/#server-relief https://download.libsodium.org/doc/password_hashing/#server-...
- xnyhps 9y agoI'm still wondering how to deal with password changes in that scheme. If you change the salt, you reveal the existence of that account and the fact that the password changed. But keeping the salt the same seems unsafe as well...