note 109436 deleted from faq.passwords by rasmus

Note Submitter: wow_i_cant_believe_this ---- are you kidding me? This entire write-up and all but the first comment are complete jokes. I would encourage the PHP community to do a serious check of how they go about explaining such security issues. A developer reading this would just assume they should use blowfish letting all of the other issues (salt for instance) go in one ear and out the other. And then you will have "clever" developers such as that of the previous comment that interpret computational intensity in the creation phase as a relevant measure and hence running a hash in loop/sequence. This is joke. You try to simplify an issue that should not be simplified. The result is misconceptions and almost guarantee of implementation problems.