Tagged Questions
2
votes
6answers
191 views
Is it okay to wrap a cryptographic hash with MD5 for storage?
Is there any security issues if you wrap your cryptographic hash with MD5 for storage purposes?
For example:
$hash = md5(hash($password,$salt,$rounds));
Note: hash() uses scrypt or bcrypt or pbkdf2 ...
2
votes
1answer
180 views
PCI-DSS and salt storage
PCI-DSS states the following:
3.5 Protect any keys used to secure cardholder data against disclosure and misuse
I have a service which stores a salted bcrypt hash of the user's PAN. Assuming the ...
