88 reputation
5
bio website
location
age
visits member for 2 years, 3 months
seen Dec 16 at 13:51

Dec
15
awarded  Scholar
Dec
15
accepted Creating secure PIN in Java
Dec
10
comment Creating secure PIN in Java
Reason is that PIN is not stored in the database, so I need to be able to recreate it. In the context of this question, user id is to be considered secure (secret). Question is regarding the usage of explicitly seeded SecureRandom as a mean of creating "secure hash", which is what I'm doing here actually.
Dec
10
asked Creating secure PIN in Java
Mar
18
awarded  Popular Question
Aug
29
comment Hash function change
What is the benefit of gradual migration? Only benefit I see is that after given period of time I will be able to "retire" the old password scheme. But why do I need to do so? I already have the methods for using it, so it doesn't bother me.
Aug
29
comment Hash function change
What is the benefit of gradual migration? Only benefit I see is that after given period of time I will be able to "retire" the old password scheme. But why do I need to do so? I already have the methods for using it, so it doesn't bother me.
Aug
28
awarded  Supporter
Aug
28
awarded  Nice Question
Aug
27
comment Hash function change
Thanks for the clarification. I will definitely take that into consideration.
Aug
27
comment Hash function change
Thanks. Why do you recommend bcrypt over SHA-2 (and soon SHA-3), which is NIST standard for cryptographic hash? Is it (only) because bcrypt can be made arbitrarily slow?
Aug
27
comment Hash function change
Old hash is unix crypt (DES based) and new is not decided yet. Salt is random for each user.
Aug
27
awarded  Student
Aug
27
asked Hash function change