3 ms·
that's true, but it's the highest-profile encryption drama I could think of - a more appropriate example would probably be the onslaught of companies which are
by alexjeffrey 14y ago
that's true, but it's the highest-profile encryption drama I could think of - a more appropriate example would probably be the onslaught of companies which are storing passwords in plaintext or simple MD5 hashes.
- tptacek 14y agoHate to keep doing this to you† but you don't need anything like NaCL to solve that problem; just use bcrypt. Every development environment has a bcrypt. Good example of a flaw mitigated by NaCL: the CBC padding oracle attack. † Caveat: no I don't
- alexjeffrey 14y agoOK you caught me - I don't have any relevant examples :)
- jedisct1 14y agoAs pointed out by @bascule, Sodium will ship with the winning function of the Password Hashing Competition.