Re:Disqus Security Alert: User Info Breach
by wolf550e on Friday October 06, 2017 @10:00PM
(#15421844)
Yes to scrypt, but these days, Argon2[1] is the best.
"better" means "cannot be calculated much faster on GPU or even FPGA because it requires a lot of RAM".
"materially better" probably means "less than a million of hashes per second on eight Nvidia GTX 1080 running hashcat"[2], so Django and scrypt are both good (adjust work factor as needed, of course).
"better" means "cannot be calculated much faster on GPU or even FPGA because it requires a lot of RAM".
"materially better" probably means "less than a million of hashes per second on eight Nvidia GTX 1080 running hashcat"[2], so Django and scrypt are both good (adjust work factor as needed, of course).
1 - https://en.wikipedia.org/wiki/Argon2
2 - https://gist.github.com/epixoip/a83d38f412b4737e99bbef804a27...