4 ms·
Or SCrypt: http://www.tarsnap.com/scrypt.html http://www.tarsnap.com/scrypt.html The question here is, considering what they are doing(i.e. handling monetary t
by drtse4 15y ago
Or SCrypt: http://www.tarsnap.com/scrypt.html http://www.tarsnap.com/scrypt.html
The question here is, considering what they are doing(i.e. handling monetary transactions), shouldn't they have implemented a better hashing strategy from the beginning? After this, i'd say they are not the best source for security advices...
- Ixiaus 15y agoI known I'm a bit late here, you probably won't see this. I originally did use scrypt, actually, because I'm a fan of Colin's work but I was turned off by the lack of rigorous 3rd party crypto analysis of his reference implementation. Something bcrypt has... Also, the python scrypt wrapper kept erroring out when I would use it in an app running in mod_wsgi... (which has probably since been fixed)
- drtse4 15y agoAgreed, the lack of peer reviews seems to be main reason people choose to go with bcrypt, i've seen this pointed out frequently on other sites.