Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Only in the most technical sense: cycle for cycle, PBKDF2 gets you the smallest amount of protection from that group of password hashes. PBKDF2 is still vastly better than non- password hashes like salted SHA.


You say that "PBKDF2 is still vastly better than non-password hashes like salted SHA", but is PBKDF2 (with >10,000 iterations using SHA512 and a random salt, for example) secure enough?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: