5 ms·

The Bcrypt Password Hashing Algorithm Starts Its Long Goodbye

• lucasyvas 3y ago
  Is Argon2(id) still the favorite now?
  • lagniappe 3y ago
    yes
    • nielsprovos 3y ago
      That is not entirely clear; you may want to look at https://en.wikipedia.org/wiki/Balloon_hashing https://en.wikipedia.org/wiki/Balloon_hashing - which may be superior to Argon2
      • lagniappe 3y ago
        I am eager to see more options in the stdlib of the languages I use primarily, but until that time comes, it appears that argon2id is the safe bet for now
        • nielsprovos 3y ago
          Fair enough. That's ultimately what I think made bcrypt successful, it was widely available in basically all languages and easy to configure.
• tgmatt 3y ago
  https://archive.is/TOGAy https://archive.is/TOGAy