/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 dusted.codes
SHA-256 is not a secure password hashing algorithm
| | www.sjoerdlangkemper.nl
Requirements for iterative password hashing
0.9 parsecs away

Travel
| | To securely store passwords they should be hashed with a slow hashing function, such as PBKDF2. PBKDF2 is slow because it calls a fast hash function many times. This blog post explores some properties that the iterations must have to be secure.
| | blog.josefsson.org
On Password Hashing and RFC 6070 - Simon Josefsson's blog
0.8 parsecs away

Travel
| |
| | www.splitbrain.org
Working with Password Hashes in PHP [splitbrain.org]
1.1 parsecs away

Travel
| | [AI summary] The post explains how to manage password hashing in PHP using DokuWiki's auth_cryptPassword() and auth_verifyPassword() functions to support multiple algorithms like MD5, SHA1, and crypt while ensuring backward compatibility.
| | josh.blog
Strong Password Enforcement - Josh Betz
11.4 parsecs away

Travel
| Modern web applications have a responsibility to prevent their users from using easily compromised passwords. I would also say that it's in their best interest, although it's certainly a trade off. Most people still don't use password managers, so stricter requirements will lead to some people losing access to their accounts. Still though, forcing people [...]