4 ms·

In some old articles it was mentioned they used Bcrypt. Not sure if that has changed. Not so many new algos are proven to be good.

• skunkworker 6y ago
  As long as they’re continually bumping the work factor it should be good for now.
  • rswail 6y ago
    If passwords are peppered as well as salted, is the bcrypt work factor a factor?
    • rocqua 6y ago
      When the pepper is compromised, the work factor still matters.
• fmajid 6y ago
  Bcrypt wasn’t designed for GPUs, FPGAs and ASICs, unlike argon2 or scrypt that are designed to consume lots of RAM so they can’t be parallelized. The common knowledge “just use bcrypt” is dangerously outdated.