3 ms·
To beat the dead horse one more time, please use per-user salts and bcrypt, scrypt, or PBKDF2 (RFC 2898). Single time hashes (even per-user salted), are no lon
by kogir 15y ago
To beat the dead horse one more time, please use per-user salts and bcrypt, scrypt, or PBKDF2 (RFC 2898).
Single time hashes (even per-user salted), are no longer sufficient protection.
- mapgrep 15y agoI think you mean "PBKDF2 with thousands or tens of thousands of iterations," not single iteration like RIM was using :) http://blog.crackpassword.com/2010/09/smartphone-forensics-cracking-blackberry-backup-passwords/ http://blog.crackpassword.com/2010/09/smartphone-forensics-c...