3 ms·
If I'm not misunderstanding your purpose, why not just: 1) Take those md5 unsalted passwords and 2) bcrypt them Then upgrade the users to non-pre-hashed bcryp
by carbocation 15y ago
If I'm not misunderstanding your purpose, why not just:
1) Take those md5 unsalted passwords and
2) bcrypt them
Then upgrade the users to non-pre-hashed bcrypt as they log in?
?
- peteretep 15y agoWhy do you think that isn't what this is doing, only with fault tolerance to allow more than one scheme upgrade?
- carbocation 15y agoBecause the juicy bits got cut off due to the way github is displayed on my phone. Sorry I couldn't see that portion!