The more I learn about security, the more I realise I don't know anything about the subject.
100 Password Hashing add salt + pepper or is salt enough? apr 22 '11
47 How to store salt? jul 20 '12
10 PHP crypt() or phpass for storing passwords? jul 12 '12
6 Surfing anynomously apr 26 '11
5 How can a system enforce a minimum number of changed characters in passwords, without storing or processing old passwords in cleartext? may 26 '11
5 Is there a better way to take advantage of current 'approved', 'proven', and memory/cpu-expensive algorithms while using salts and peppers? nov 2 '12