Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It's sadly common for inexperienced devs to use MD5 and call it a day (if they hash at all).

I just wanted to point out that, for situations where user input and security are important, you want the algorithm to be slow.

I didn't say anything about how to implement it or whether you should use BLAKE2 or what. There's a lot more to it than I could put in a reply here, and even quick Googling would turn up info about salting/iterating/etc.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: