Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
I am developing an industry-level web server that requires that all passwords be encrypted in some way.
The middle-ware for the server is Java-based. My only restriction is that I can't use API's like bCrypt for this. Can anyone suggest a way to do this?
There are currently three accepted password hashing algorithms (note the difference between encryption and hashing!):
So you can use either of these three. PBKDF2 is the most supported. Storing passwords in a reversible way is considered bad practice.
