News for hackers. Stuff that matters.
Re:BitAuth for Decentralized Authentication by randomtask on Wednesday July 02, 2014 @05:38AM (#7975995)
Passwords should usually not be encrypted. Saying a password is encrypted implies that there is a decryption function that can produce the original password in plaintext. This should not be the case. Instead, typically, a key derivation function like bcrypt, scrypt, etc. is applied. The output of these are sometimes referred to as "password hashes" because like hashes they are not reversible.
Re:BitAuth for Decentralized Authentication by pencilcode on Wednesday July 02, 2014 @05:45AM (#7976008)
Yes, my mistake. I meant hashed.