note 124373 deleted from function.hash-pbkdf2 by cmb
| From: | cmb@php.net | Date: | Wed, 06 Nov 2019 12:59:09 +0000 |
| Subject: | note 124373 deleted from function.hash-pbkdf2 by cmb | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-212953@lists.php.net to get a copy of this message | ||
Note Submitter: Anonymous
----
And what are those inconvenient methods better? For example, I will do this:
unction pass_hash($pwd) {
$salt = bin2hex(random_bytes(9));
$hash = hash_pbkdf2('sha512', $pwd, $salt, 1555, 150);
return $hash.$salt;
}
A hacker who hacked into a given database will not be able to understand where the salt is and where
the password is. Therefore, I consider this method the most reliable than the built-in php