问题
Is there a secure password hashing library (e.g. phpass) or hashing method that I can easily use in both PHP and Java?
回答1:
If you want do the easy thing, you can use sha-N with salt. (N being 1, 256 or 512)
Jeff Atwood did a nice blog post on that recently, saying that bcrypt and PBKDF2 are the best options.
In PHP you can use bcrypt (and in Java too)
Related topics:
- How do you use bcrypt for hashing passwords in PHP?
Resouces:
- Coding Horror - Speed Hashing
- Security Stack exchange - Do any security experts recommend bcrypt for password storage?
回答2:
Any standard library such as SHA*, MD* will do. SHA>2 is recommended (e.g. SHA512).
回答3:
md5 and SHA with salt are the most widely used ones.
来源：https://stackoverflow.com/questions/10079700/password-hashing-compatible-with-java-and-php