What hashing algorithm should I use for storing passwords?

前端 未结 2 623
鱼传尺愫
鱼传尺愫 2020-12-10 17:39

I\'m not really up to date with the most recent developments regarding hashing algorithms strengths; what is currently my best bet for storing passwords?

Also, how m

2条回答
  •  死守一世寂寞
    2020-12-10 18:29

    Check out this.

    This question over at security.stackexchange is a good discussion of bcrypt vs. PBKDF2 - Do any security experts recommend bcrypt for password storage?

    The key is that a hash function alone will not prevent a precomputation attack (e.g. rainbow table). And adding a salt won't protect you from a dictionary or a brute force attack. You are much better using bcrypt or PBKDF2 than building your own scheme with a hash algorithm.

提交回复
热议问题