How To Safely Store A Password

Re:How To Safely Store A Password by ams6110 on Tuesday December 14, 2010 @10:52PM (#2006971)

Some projects require FIPS 140-2 compliance. I've not been able to find that blowfish or bcrypt are certified. See http://csrc.nist.gov/publications/fips/fips140-2/fips1402ann...

[ Parent | on HN ]

Re:How To Safely Store A Password by burgerbrain on Tuesday December 14, 2010 @11:26PM (#2007057)

If a randomly clobbered together and unvetted system is compliant, but bcrypt isn't, that just goes to show how little FIPS140-2 compliance actually means. (as if everybody didn't already know it's worthless)

[ Parent | on HN ]

Re:How To Safely Store A Password by ams6110 on Tuesday December 14, 2010 @11:40PM (#2007078)

Nonetheless, some projects mandate use of FIPS 140-2 hashing algorithms, and afaik bcrypt is not one. So if you find yourself on such a project, bcrypt is not an option on the table.

I'd be happy to find out I'm wrong.

[ Parent | on HN ]