39 ms·
Further, a hash is the wrong primitive to use to store passwords. Just as you wouldn't attempt to invent a cryptographic hash function yourself. The correct pr
by rlpb 6y ago
Further, a hash is the wrong primitive to use to store passwords. Just as you wouldn't attempt to invent a cryptographic hash function yourself.
The correct primitive to use is a key derivation function. Examples are PBKDF2, bcrypt, scrypt and Argon2.
- SAI_Peregrinus 6y agobcrypt is NOT a key derivation function. It IS a "password hashing function". PBKDF2, Argon2, and scrypt are both.