News for hackers. Stuff that matters.

A comment on Can you trust 37signals with your password? . Parent comment

Re:Can you trust 37signals with your password? by FooBarWidget on Sunday May 03, 2009 @04:53AM (#590734)
Are SHA-512 and Whirlpool considered acceptable?
[ Parent | on HN ]
Re:Can you trust 37signals with your password? by tptacek on Sunday May 03, 2009 @12:45PM (#590983)
SHA-512 and Whirlpool are still designed to be very fast. The point is, you want to slow down the password hashing operation. So SHA-512, SHA-256, and SHA-1 are all fine, as long as you iterate them several thousand times.
[ Parent | on HN ]