3 ms·
Any reason you don't use SHA2? Just old software/compatibility issues, or...?
by lettergram 13y ago
Any reason you don't use SHA2? Just old software/compatibility issues, or...?
- tptacek 13y agoAmong whatever other reasons there might have been, the difference between SHA1 and SHA2 is not meaningful for password hashing.
- lettergram 13y agoActually, SHA-1 has several security flaws, SHA-2 fixed some of those issues. With a salt SHA-2 should be fine, double salt would be better... http://en.wikipedia.org/wiki/SHA-1 http://en.wikipedia.org/wiki/SHA-1 http://en.wikipedia.org/wiki/SHA-2 http://en.wikipedia.org/wiki/SHA-2