Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Cryptographic Hash Functions Are Not Password Hash Functions (throwingfire.com)
8 points by Swizec on Aug 22, 2012 | hide | past | favorite | 3 comments


For curiosity's and an cryptography newb, how does the lithium PHP framework stack up against the methods discussed in the article?

Password hashing: http://lithify.me/docs/lithium/security/Password::hash()


If you use CRYPT_BLOWFISH (bcrypt) it's fine.


Thanks for the response, looks like it uses a Blowfish salt by default.




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: