Re: [fpc-pascal] is scrypt available?

2015-10-29 Thread wkitty42
On 10/29/2015 01:08 PM, Frederic Da Vitoria wrote: Good point. I'd even ask the question: do you really need to store the passwords? IOW, do you want to be able to send them back to the user? Or do you only need to check them? in the use case being studied, passwords can only be compared or res

Re: [fpc-pascal] is scrypt available?

2015-10-29 Thread Frederic Da Vitoria
2015-10-29 17:56 GMT+01:00 Klaus Hartnegg : > Am 27.10.2015 um 18:55 schrieb David W Noon: > >> >> > > >> > > Do not use a normal hash function to store passwords. If the password file > is stolen, the atta

Re: [fpc-pascal] is scrypt available?

2015-10-29 Thread Klaus Hartnegg
Am 27.10.2015 um 18:55 schrieb David W Noon: Do not use a normal hash function to store passwords. If the password file is stolen, the attackers can quickly determine most passwords. There are spec