Secure Password Hashing [closed]
Salt your hash with secure random salt of at least 128bits or longer, to avoid a rainbow attack and use BCrypt, PBKDF2 or scrypt. PBKDF2 comes with NIST approval. To quote: Archive.org: http://chargen.matasano.com/chargen/2007/9/7/enough-with-the-rainbow-tables-what-you-need-to-know-about-s.html The problem is that MD5 is fast. So are its modern competitors, like SHA1 and SHA256. Speed is a design goal of … Read more