Page 1 of 1

Good article on Salted Password Hashing

Posted: Wed May 15, 2013 2:04 am
by RichAlgeni
'The correct way'

http://crackstation.net/hashing-security.htm

The article describes using 'slow' encryption, to foil hackers. For a much older system I wrote, I just put in a incremental delay for each incorrect password.

Re: Good article on Salted Password Hashing

Posted: Wed May 15, 2013 3:36 am
by skywalk
Thanks.
Is a native SHA256 hash planned for PB?
I know there are some ASM versions posted here and the German forum.

Re: Good article on Salted Password Hashing

Posted: Wed May 15, 2013 5:54 pm
by RichAlgeni
I've used the assembler version from the fine folks who haunt the Assembler forum.

Re: Good article on Salted Password Hashing

Posted: Sun May 19, 2013 4:11 am
by buddymatkona
Interesting article. Thanks. I have always wondered why wrong password entry was so often followed by a simple "Try Again".
Failure should be the trigger to introduce slow methods such as a CAPTCHA code before the next guess.