Web Cryptography: Salted Hash and Other Tasty Dishes

Posted by gaiusparx on Tuesday February 22, 2011 @08:59AM
from the alistapart.com dept.

( 2 comments | 7 points | on HN )

Re:Web Cryptography: Salted Hash and Other Tasty Dishes by barryaustin on Tuesday February 22, 2011 @10:15AM (#2250080)

Since the target audience is mostly non-hackers, I'd make these points instead:

- For people not using a library or framework, use one!

- For people who build libraries and frameworks, consider bcrypt!

- For people who aren't cryptography deities, don't roll your own. Even Bruce Schneier needs heavy peer review.

And a nit - SHA-1 is showing its age and is being phased out; SHA-2 is much stronger and is widely available.

[ Parent | on HN ]

Re:Web Cryptography: Salted Hash and Other Tasty Dishes by goldmab on Tuesday February 22, 2011 @09:24AM (#2249928)

[ Parent | on HN ]