729 reputation
146
bio website
location Zurich, Switzerland
age
visits member for 4 years
seen Aug 11 '11 at 11:17

Software Engineer working with Microsoft's .NET Framework by day, and dabbling in Haskell by night.


Sep
24
awarded  Autobiographer
Nov
12
awarded  Yearling
Nov
12
awarded  Yearling
Nov
12
awarded  Yearling
Aug
26
awarded  Populist
Jul
19
awarded  Critic
Jul
14
awarded  Good Answer
Jun
25
awarded  Nice Answer
Jun
25
awarded  Teacher
Dec
9
awarded  Precognitive
Nov
12
awarded  Supporter
Sep
18
comment Do any security experts recommend bcrypt for password storage?
+1 for mentioning HMAC, which I completely forgot to mention as the more secure alternative to a simply salted SHA-256 hash. Length extension attacks are well known; the Flickr API once was compromised because it used to sign API calls using MD5(secret + argument list) (see " Flickr's API Signature Forgery Vulnerability " [PDF] for further information)
Sep
16
answered Do any security experts recommend bcrypt for password storage?