4 ms·
How does one stay up-to-date on this stuff? Or is it just something that's easier to remember for someone who specializes in security?
by j_baker 15y ago
How does one stay up-to-date on this stuff? Or is it just something that's easier to remember for someone who specializes in security?
- tptacek 15y agobcrypt is something like a decade old. You don't have to stay up-to-date on it. The vulnerability that bcrypt accounts for dates back to 1972. All you have to do is not design your own password hashes with SHA-2 (or Whirlpool or CubeHash or whatever some random Stack Overflow answer says you should use). You can safely keep PBKDF2, bcrypt, and scrypt in your bag of tools --- of those, only scrypt is recent --- and reach for whichever one is easiest.