How Dropbox securely stores your passwords

Re:How Dropbox securely stores your passwords by amenghra on Wednesday September 21, 2016 @11:32AM (#12549110)

It's a chain of hash because that's how passwords were migrated from being stored unsalted, to salted, to scrypted.

People sometimes complain that migrating passwords is a pain, but if you wrap the older scheme with a newer hash* it kind of works out.

Today, I would consider argon2 which came out of PHC.

* you need to carefully study the security properties of the combined hash.

[ Parent | on HN ]

Re:How Dropbox securely stores your passwords by dsacco on Wednesday September 21, 2016 @11:38AM (#12549179)

>> It's a chain of hash because that's how passwords were migrated from being stored unsalted, to salted, to scrypted.

I kind of figured that, thanks for confirming :).

Personally I wouldn't consider Argon2 yet for production, but only because I'd like to see it run at scale for a few years. PHC or not, I'm hoping it becomes more battle-tested in production use.

That said, I'd fully respect any team for using Argon2 and have no personal qualms with it.

[ Parent | on HN ]

Re:How Dropbox securely stores your passwords by user5994461 on Wednesday September 21, 2016 @12:08PM (#12549483)

Argon2i and argon2d => bad idea to use that in production

(and yes, the researchers made two different algorithms with the same name)

[ Parent | on HN ]