Timeline for Keyed-hashing a password with a hash of the password + salt as the key, is it safe?
Current License: CC BY-SA 3.0
12 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 28, 2014 at 22:11 | vote | accept | user38044 | ||
| Jan 28, 2014 at 14:11 | answer | added | Tom Leek | timeline score: 3 | |
| Jan 28, 2014 at 10:24 | answer | added | paj28 | timeline score: 1 | |
| Jan 28, 2014 at 3:43 | history | tweeted | twitter.com/#!/StackSecurity/status/428010465420394496 | ||
| Jan 28, 2014 at 3:03 | comment | added | Quick Joe Smith | this question also explains why this is bad, but uses even more words than the link posted by 12 Dogs. | |
| Jan 28, 2014 at 2:40 | comment | added | Quick Joe Smith | +1 for bcrypt. | |
| Jan 28, 2014 at 2:39 | comment | added | user38044 | I would like to use bcrypt but I don't maintain the system and I don't know if what they are doing is incorrect other than using a constant salt. | |
| Jan 28, 2014 at 2:33 | review | First posts | |||
| Jan 28, 2014 at 4:06 | |||||
| Jan 28, 2014 at 2:30 | comment | added | Stephen Touset | Just use bcrypt. | |
| Jan 28, 2014 at 2:29 | comment | added | Quick Joe Smith | Yeah, something about that doesn't look right to me. | |
| Jan 28, 2014 at 2:27 | comment | added | 12 Dogs | this stack exchange article explains why it's a bad idea | |
| Jan 28, 2014 at 2:14 | history | asked | user38044 | CC BY-SA 3.0 |