News for hackers. Stuff that matters.

A comment on Ask HN: What is your password management solution?. Parent comment

Re:Ask HN: What is your password management solution? by chilicuil on Saturday July 15, 2017 @01:26PM (#14777786)
You shouldn't use hash functions designed for integrity, they're fast, fast is bad for password hashing, a single AMD graphics card can compute 200M guesses per second for single sha-512 iterations, instead use bcrypt, scrypr or any other hash function specifically designed for key stretching.

https://hashcat.net/hashcat/

https://en.m.wikipedia.org/wiki/Key_stretching

[ Parent | on HN ]
Re:Ask HN: What is your password management solution? by dheera on Saturday July 15, 2017 @01:37PM (#14777854)
Yep, I'm using pbkdf2-hmac-sha256 which is not just sha-256. The 2nd link you posted mentions pbkdf2.
[ Parent | on HN ]