3 ms·

> Rolling your own crypto is already hard enough Wait, what? Do you role your crypto to handle standard auth flows? Is this some machine generated text?

• n2d4 2y ago
  You must encrypt and salt passwords and retrieve them without being susceptible to timing attacks. PKCE. 2FA/TOTP as well.
  • tgma 2y ago
    Those are traditionally done with existing proven solutions, not "rolling your own crypto" though.