4 ms·
You are absolutely right. This is not our production app (ours is at 12 IIRC) but some internals app I've been playing with.
by MattRogish 14y ago
You are absolutely right. This is not our production app (ours is at 12 IIRC) but some internals app I've been playing with.
- tptacek 14y agoOk just so you know the default cost factor for bcrypt-ruby is a reasonable choice, and the cost factor you've used here is unreasonable.
- MattRogish 14y agoAbsolutely. Was trying (but failing) to make a joke.
- jgeorge 14y agoBCrypt 19s are <40s to encrypt here, using Java and not even native code. Certainly not outside the realm of usability for something you don't authenticate against all the time. I wouldn't want that for my screenlock password, but I can still see it being workable.