Re: Password storage (was Re: gmail security is a joke)

2015-05-28 Thread shawn wilson
On May 28, 2015 10:11 AM, "Christopher Morrow" wrote: > > On Thu, May 28, 2015 at 5:29 AM, Robert Kisteleki wrote: > > > >> Bcrypt or PBKDF2 with random salts per password is really what anyone > >> storing passwords should be using today. > > One thing to remember is the hardware determines num

Re: Password storage (was Re: gmail security is a joke)

2015-05-28 Thread Michael Thomas
On 05/28/2015 02:29 AM, Robert Kisteleki wrote: Bcrypt or PBKDF2 with random salts per password is really what anyone storing passwords should be using today. Indeed. A while ago I had a brainfart and presented it in a draft: https://tools.ietf.org/html/draft-kistel-encrypted-password-storage-00

Re: Password storage (was Re: gmail security is a joke)

2015-05-28 Thread Christopher Morrow
On Thu, May 28, 2015 at 5:29 AM, Robert Kisteleki wrote: > >> Bcrypt or PBKDF2 with random salts per password is really what anyone >> storing passwords should be using today. > > Indeed. A while ago I had a brainfart and presented it in a draft: > https://tools.ietf.org/html/draft-kistel-encrypte