Tag Info

New answers tagged

-2

PBKDF2 is not a hashing algorithm per se. It key derivation function (KDF) which "harden" the hashing algorithm you've chosen. Scrypt is also a KDF, so it does not make any additional protection to use two similar functions. As you wrote, the strength will be as good as the strongest of the chosen two. And, as Revulai said in her good answer, you shouldn't ...


3

You should really stray away from rolling your own crypto implementation. Why not use bcrypt for password storage? It's been tested extensively for that and works quite well. Some advantages it has are: Resistance to brute-force Resistance to rainbow tables Salt generation Scalable speeds via setting the rounds of hashing Built upon blowfish algorithm ...


3

Theoretically speaking, Scrypt gives higher safety per unit compute time than already similar known ones. It is also possible, with Scrypt, to set the memory space needed to compute the result thus making a brute-force attacker pay penalties (in terms of memory and processor ... and GPU). From a theoretical and algorithmic perspective Scrypt is ...



Top 50 recent answers are included