New answers tagged

0

It's 2016, so it's well worth revisiting this 5 year-old question. There was a Password Hashing Competition conducted from 2013 to 2016, which accepted 24 submissions and selected Argon2 as its recommended password hashing algorithm. Everything that Thomas said about new vs. good still applies. As recently as February 2016 (after the end of the contest) ...


3

In general, use the maximum cost factor that is bearable from a performance perspective. I would create a benchmark application which is as close as possible to what your application does, and find out the cost factor on your production hardware that gives you the maximum tolerable delay. In most systems, I strive for a 10 to 20 ms delay. Assume your ...


1

There's three different password hashing algorithms being discussed here: | Algorithm | Cryptographic primitive | Crypto-currency that uses it| Miner speed | |-----------|-------------------------|-----------------------------|---------------| | PBKDF2 | SHA-256 | Bitcoin uses SHA-256 | 7 Thash/sec | | | ...



Top 50 recent answers are included