note 113643 added to faq.passwords

The section "Why are common hashing functions such as md5() and sha1() unsuitable for passwords?" is completely wrong. No one says MD5 and SHA-1 aren't suitable for password hashing due to their speed. (MD5 is broken for digital signatures but not yet for password hashing, but not because it is fast.) A single round of them is unsuitable, but that is not a problem with the underlying algorithms themselves. Always use a salt, preferably a big (e.g. at least 16 characters) salt. Always run through multiple rounds of of the hashing. Most implementations today use several tens of thousands or hundreds of thousands of rounds, for example 7-zip's encrypted format uses 262,144 rounds of SHA-256. ---- Server IP: 72.52.91.14 Probable Submitter: 72.52.91.14 ---- Manual Page -- http://php.net/manual/en/faq.passwords.php Edit -- https://master.php.net/note/edit/113643 Del: integrated -- https://master.php.net/note/delete/113643/integrated Del: useless -- https://master.php.net/note/delete/113643/useless Del: bad code -- https://master.php.net/note/delete/113643/bad+code Del: spam -- https://master.php.net/note/delete/113643/spam Del: non-english -- https://master.php.net/note/delete/113643/non-english Del: in docs -- https://master.php.net/note/delete/113643/in+docs Del: other reasons-- https://master.php.net/note/delete/113643 Reject -- https://master.php.net/note/reject/113643 Search -- https://master.php.net/manage/user-notes.php