Good article on Salted Password Hashing

[RichAlgeni]

'The correct way'

http://crackstation.net/hashing-security.htm

The article describes using 'slow' encryption, to foil hackers. For a much older system I wrote, I just put in a incremental delay for each incorrect password.

[skywalk]

Thanks.
Is a native SHA256 hash planned for PB?
I know there are some ASM versions posted here and the German forum.

[RichAlgeni]

I've used the assembler version from the fine folks who haunt the Assembler forum.

[buddymatkona]

Interesting article. Thanks. I have always wondered why wrong password entry was so often followed by a simple "Try Again".
Failure should be the trigger to introduce slow methods such as a CAPTCHA code before the next guess.