3 ms·
Funny how people laugh at LinkedIn for using SHA-1 and then recommend using password generators that use one iteration of MD5 of master password.
by dchest 14y ago
Funny how people laugh at LinkedIn for using SHA-1 and then recommend using password generators that use one iteration of MD5 of master password.
- yogsototh 14y agoYes, as @tlrobinson suggested me, I should use bcrypt instead of SHA1. At the time I created ypassword there weren't any bcrypt js code. There is one now, and this will be my next update. In fact, I tried to port scrypt to js once. Reading the article about scrypt it felt not so hard to achieve. But I was afraid to introduce implementation error because some parameter aren't specified as clearly as I would have liked in the article.