4 ms·
Cheers (that's why I love this place). At the moment I use Authlogic in Rails, which uses SHA512 by default (SHA512 is built into the Ruby core libs). But I a
by rahoulb 16y ago
Cheers (that's why I love this place).
At the moment I use Authlogic in Rails, which uses SHA512 by default (SHA512 is built into the Ruby core libs).
But I also notice that it's quite easy to switch to bcrypt (using the bcrypt gem).
Is it worth switching? Or at least using that as my default on new apps?
- ZoFreX 16y agoWhat is it being used for, and how is it being used? I'm guessing this is password hashes. Is rails using a unique salt for each password? Bcrypt is slower than SHA512, in fact it can be made to be very slow. This is actually ideal for password hashes, it doesn't matter if it takes your server 50 milliseconds to calculate a password hash but that would severely slow down an attack. It is important however that they are being used correctly. Either would be a good solution if properly salted.