4 ms·
Reading these articles, I already implemented salts in my code, but I never realized that I have been implementing them incorrectly.
by silverbax88 14y ago
Reading these articles, I already implemented salts in my code, but I never realized that I have been implementing them incorrectly.
- SoftwareMaven 14y agoWhich is why crypto should be left to reviewed experts. It is painfully easy to get wrong, and when you get it wrong, the result is usually a crack able system.
- silverbax88 14y agoI'm not doing custom encryption. I'm not sure why you would think that.
- stouset 14y agoStop what you're doing, and just [use bcrypt](http://codahale.com/how-to-safely-store-a-password/ http://codahale.com/how-to-safely-store-a-password/). The fact that you've gotten it wrong already (when you probably thought you knew what you were doing) should be a strong wakeup call. There's always an attack you didn't know about or a countermeasure you didn't think of.
- silverbax88 14y agoI already use bcrypt, along with several other suites.