3 ms·
Imprecise language can be used, but not when two terms mean completely different things. "Just MD5 it" advice was not given by knowledgeable security experts.
by dchest 12y ago
Imprecise language can be used, but not when two terms mean completely different things.
"Just MD5 it" advice was not given by knowledgeable security experts. The practice of using a slow cryptographic function to derive password hashes goes back at least to the 1978 paper "Password Security: A Case History" by Robert Morris and Ken Thompson. (I have collected some implementations of historic password hashes (many of which are weak) here: https://github.com/dchest/historic-password-hashes https://github.com/dchest/historic-password-hashes)