| |||||||||||||
Responsible disclosure in open source: The crypt() vulnerabilityResponsible disclosure in open source: The crypt() vulnerabilityPosted Jun 11, 2012 10:31 UTC (Mon) by intgr (subscriber, #39733)In reply to: Responsible disclosure in open source: The crypt() vulnerability by bsdphk Parent article: Responsible disclosure in open source: The crypt() vulnerability
> With respect to the guidance I give: I you think that is a bad idea, I suggest you write an easy to use, liberally licensed password scrambler which actually solves the problem for a decade or two.
There are tons of free implementations of PBKDF2 and a few of scrypt. Those are the only two that are worth using. Surely you were aware of both? I'm surprised you're even suggesting that we need any new libraries/standards.
(Log in to post comments)
|
|||||||||||||