3 ms·
It seems that PHP, Symfony, ... have kept bcrypt as their preference even when Argon2 is available; is there a rationale there from such big projects?
by gregoriol 1y ago
It seems that PHP, Symfony, ... have kept bcrypt as their preference even when Argon2 is available; is there a rationale there from such big projects?
- tptacek 1y agobcrypt is fine. scrypt is fine. Argon2 is fine. Even PBKDF2, in most configurations, is fine. You can basically just put them on a board and throw a dart.
- upofadown 1y agoThere is some thought that bcrypt is better than Argon2 for run times less than a second. So passwords in other words.