Re: Adding a simple API for secure password hashing?
| From: | Daniel Macedo | Date: | Thu, 14 Jun 2012 12:26:05 +0000 |
| Subject: | Re: Adding a simple API for secure password hashing? | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-60822@lists.php.net to get a copy of this message | ||
Hi Nikita,
I think you might just get everyone behind this; easily!
However, I'd like to throw in scrypt as well. Thoughts?
Stas has the right approach, not only should the methods be simplified and
platform/algorithm agnostic but have a proper salt built in (there are a
few CSPRNG implementations around), I've seen salts used from numbers to
md5's to just being skipped altogether.
~ Daniel Macedo