3 ms·
It's been around for years and remained solid. It's implemented in every language under the sun. It can be tuned to be plenty slow, even today. That said, ther
by owenmarshall 15y ago
It's been around for years and remained solid. It's implemented in every language under the sun. It can be tuned to be plenty slow, even today.
That said, there's nothing wrong with choosing another password derivation scheme. glibc's crypt() provides three: PHK's MD5 scheme, and Ulrich Drepper's stretched SHA-{256,512}. Just don't roll your own and you'll be ahead of the majority of programmers.