News for hackers. Stuff that matters.
Re:Passwords for 32M Twitter accounts may have been hacked a... by fredley on Thursday June 09, 2016 @05:38AM (#11868363)
bcrypt and other modern hashing algorithms allow strengthening your hashes (by computing more iterations) at a later date should technological advances make your current number of rounds too weak. This allows you to 'upgrade' your password hashes from 20 rounds to 20,000 without needing the user to re-enter their password. If you publish your hashes at any point, you lose the benefits of this, if your hashes become weakened by technological progress you need to reset your users' passwords.

There are no comments on this comment yet.