|
You are here |
soatok.blog | ||
| | | | |
dusted.codes
|
|
| | | | | SHA-256 is not a secure password hashing algorithm | |
| | | | |
www.sjoerdlangkemper.nl
|
|
| | | | | To securely store passwords they should be hashed with a slow hashing function, such as PBKDF2. PBKDF2 is slow because it calls a fast hash function many times. This blog post explores some properties that the iterations must have to be secure. | |
| | | | |
www.splitbrain.org
|
|
| | | | | [AI summary] The post explains how to manage password hashing in PHP using DokuWiki's auth_cryptPassword() and auth_verifyPassword() functions to support multiple algorithms like MD5, SHA1, and crypt while ensuring backward compatibility. | |
| | | | |
jbp.io
|
|
| | | [AI summary] This post explains a security demo using Intel SGX enclaves to harden password hashing by creating a shared 'region' of encrypted keys, preventing offline database attacks. | ||