News for hackers. Stuff that matters.

A comment on Blake3 is 10 times faster than SHA-2.

Re:Blake3 is 10 times faster than SHA-2 by nloladze on Saturday January 11, 2020 @03:41PM (#22022156)
Uhhh, I have an idea how sha-256 works but not blake3. Is blake3 better for storing passwords? If not, what is the go-to recommended hash for password storage of say, a simple front-facing app for consumers.
[ Parent | on HN ]
Re:Blake3 is 10 times faster than SHA-2 by klodolph on Saturday January 11, 2020 @03:46PM (#22022187)
SHA-256 is absolutely not recommended for storing passwords, and it was never designed for that purpose. If you are storing passwords with SHA-256 you should immediately migrate them to a password hashing algorithm. See “Upgrading Legacy Hashes” in the link below.

https://cheatsheetseries.owasp.org/cheatsheets/Password_Stor...

Recommended algorithms:

- Argon2

- PBKDF2

- Bcrypt

[ Parent | on HN ]
Re:Blake3 is 10 times faster than SHA-2 by nabla9 on Saturday January 11, 2020 @03:46PM (#22022186)
Neither is especially good for storing passwords.

Better use specialized password hashing functions like Argon2 or bcrypt.

[ Parent | on HN ]