Beyond Bcrypt - Dhole Moments
soatok.blog
In 2010, Coda Hale wrote How To Safely Store A Password which began with the repeated phrase, “Use bcrypt”, where the word bcrypt was linked to a different implementation for various pr…
  • actually@lemmy.worldEnglish
    1·
    5 months ago

    heart of article is

    • Pre-hash with HMAC-SHA512.
    • Ensure the output of step 1 is base64-encoded.
    • Pass the output of step 2 to PHP’s password API.