On 10/26/2015 06:28 PM, David W Noon wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Mon, 26 Oct 2015 16:54:16 -0400, Wkitty42 (wkitt...@windstream.net)
wrote about "Re: [fpc-pascal] is scrypt available?" (in
<562e92f8.1010...@windstream.net>):
[snip]
no, i haven't heard of dcrypt... i'm specifically after scrypt for
securing passwords in a database...
So what you are really after is a hash, rather than streaming or block
cryptography.
pretty much, yes...
I use PostgreSQL, which offers MD5 hashing of passwords as a built-in,
without me adding any of my own (or anybody else's) code to perform
hashing.
sadly MD5 have been being cracked in little time for over a decade... that's why
we're looking at other means... bcrypt came up first in the searched and then
scrypt was pointed out along with bcrypt's failings... the question now is being
able/willing to use someone else's code or to reinvent the wheel... if it were
me, i'd use the other code if its license fits the app in question...
HTH
it does... it is always good to hear from you, too :)
--
NOTE: No off-list assistance is given without prior approval.
*Please keep mailing list traffic on the list* unless
private contact is specifically requested and granted.
_______________________________________________
fpc-pascal maillist - fpc-pascal@lists.freepascal.org
http://lists.freepascal.org/cgi-bin/mailman/listinfo/fpc-pascal
