4 ms·
Why is this by the way? I've googled it and most of the responses I've found were "NIST doesn't talk about bcrypt and probably won't because it's related to bl
by JamesBarney 6y ago
Why is this by the way?
I've googled it and most of the responses I've found were "NIST doesn't talk about bcrypt and probably won't because it's related to blowfish and not SHA". And the other being "Blowfish is equivalent to SHA so if anything is approved blowfish would be approved, not BCrypt which is similar to PBKDF2, which is approved because it uses SHA".
Is it just bureaucratic inertia?
- tptacek 6y agoThe point of FIPS is to deliberately narrow down the range of acceptable primitives, to simplify the evaluation of systems sold to the government. (FIPS is very bad).