4 ms·

Could you hash using both, your preferred algorithm first then theirs? That would make everyone happy.

• judge2020 7y ago
  bcrypt(sha256(pw)) works I believe, but it might not be enough to satisfy the policy.
  • Dylan16807 7y ago
    It's actually better than plain bcrypt because you can allow long passphrases.
    • bouke 7y ago
      Is it better? The suggestion is vulnerable to a sha256 collision attack.
      • DuskStar 7y ago
        Except that for a collision attack to be a thing, you need to know the value you're trying to collide with - and that requires reversing bcrypt.