News for hackers. Stuff that matters.

A comment on Okta Bcrypt incident lessons for designing better APIs. Parent comment

Re:Okta Bcrypt incident lessons for designing better APIs by n0rdy on Wednesday February 05, 2025 @04:43PM (#42955637)
There is a discussion about that on the security stackexchange (https://security.stackexchange.com/questions/133239/what-is-...). The TLDR:

> SHA-2 family of hashes was designed to be fast. BCrypt was designed to be slow.

Slow == harder to brute-force == more secure.

[ Parent | on HN ]
Re:Okta Bcrypt incident lessons for designing better APIs by progmetaldev on Wednesday February 05, 2025 @05:53PM (#42956525)
Yes, and you can increase the work factor to make it slower to generate, specifically to fight against brute-force.
[ Parent | on HN ]