Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

What the article tries to say is, that your password hashing function needs three attributes:

* it has to be dog slow (to make brute forcing hard)

* it should be complicated enough to avoid collisions (this really applies to most hash functions)

* it should be suitably salted, to avoid rainbow tables

-> bcrypt is designed like this, if in doubt, use it



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: