News for hackers. Stuff that matters.

A comment on You are dangerously bad at cryptography. Parent comment

Re:You are dangerously bad at cryptography by carbocation on Monday May 27, 2013 @09:02PM (#5777431)
Hmm, unfortunately I think Symfony2 runs passwords through 1 round of SHA1 unless a custom password "encoder" is used [1].

[1] = http://symfony.com/doc/2.0/book/security.html#encoding-the-u...

[ Parent | on HN ]
Re:You are dangerously bad at cryptography by terolacu on Monday May 27, 2013 @10:12PM (#5777631)
Bcrypt and PBKDF2 are not custom, they are part of the framework:

http://symfony.com/doc/current/reference/configuration/secur...

[ Parent | on HN ]
Re:You are dangerously bad at cryptography by carbocation on Monday May 27, 2013 @10:36PM (#5777708)
Those were added in Symfony2.2; my last experience was with 2.1. Also, I understand that neither of those is default; one should be.
[ Parent | on HN ]