pek

4 ms·

1. 1.▲
   by pek 14y ago

   Yeah, it would be weaker against a collision attack. But that shouldn't be a concern as the purpose of the password hashing function is to protect against a preimage attack: finding the password given its hash. I can't see how the compositi
2. 2.▲
   by pek 14y ago

   Couldn't you just move from, say, using MD5(password) to bcrypt(MD5(password))? So when it becomes apparent that the old hash is no more secure, start using the combination of the old bad hash (MD5) and the new good hash (bcrypt). This way
3. 3.▲
   Groupon acquires social app Ditto.me(blog.ditto.me)

   4 points by pek 14y ago|0 comments