3 ms·

Because sha1 is still super fast on a GPU. Why aren't you using bcrypt?

• Misiek 15y ago
  I thought that hashing password with two types of salt (one of them is unique for every user) and two places to storage salts is secure enough.
  • bonzoesc 15y ago
    Salts don't slow a GPU down: http://codahale.com/how-to-safely-store-a-password/ http://codahale.com/how-to-safely-store-a-password/
  • tptacek 15y ago
    You thought wrong.