Password Hashes, Again

Max Kanat-Alexander mkanat at bugzilla.org
Fri Apr 13 07:41:52 UTC 2012


	So, we probably shouldn't be using SHA at all, and we should switch to
some Perl module that specifically is designed to do password hashing:

	http://www.codinghorror.com/blog/2012/04/speed-hashing.html

	tl;dr: You can break most SHA-256 passwords pretty quickly with some GPUs.

	-Max
-- 
Max Kanat-Alexander
Chief Architect, Community Lead, and Release Manager
Bugzilla Project
http://www.bugzilla.org/



More information about the developers mailing list