2 ms·
Bcrypt is published. That's its strength, not its weakness. That's how cryptography is. The more people try to break it the better it gets. Dave's primary prob
by noonespecial 14y ago
Bcrypt is published. That's its strength, not its weakness. That's how cryptography is. The more people try to break it the better it gets.
Dave's primary problem is that his scheme is based on MD5 which is still well known, but can be brute forced quickly. His additional lightweight obfuscation will provide nearly zero extra protection.
Use Bcrypt with salt. End of story.
- Nursie 14y ago'xactly. Published crypto is stronger because it's had many eyes on it, not weaker. This is pre-101 level crypto knowledge, it's like the first line in the idiot's guide. Or it should be!