6 ms·
Just as a random question: Why are people using hash functions designed to be fast for large file digests/etc (ie. SHA) for password hashing? Isn't this what s
by asharp 15y ago
Just as a random question: Why are people using hash functions designed to be fast for large file digests/etc (ie. SHA) for password hashing?
Isn't this what scrypt/bcrypt/etc. are designed for?
- DrJ 15y agoIt was much easier to teach "secure" password storage using hashed (because usually at this point you understood simple hashing but not enough about good cryptography). Also when much of this started we didn't have hardware that could brute and entire database of hashes within hours. Lastly, laziness.