password-hashes icon indicating copy to clipboard operation
password-hashes copied to clipboard

Published 20 hours ago • verified publisher icon RustCrypto

Recommended password hashing algorithms

Open tarcieri opened this issue 4 years ago • 1 comments

Following up from https://github.com/RustCrypto/meta/issues/10, this is an issue for discussion potentially adding "recommended" badges to certain algorithms in this repo:

Recommended: Yes

tarcieri avatar Feb 09 '21 15:02 tarcieri

I'd vote for recommending argon2 and scrypt.

I think it's worth considering NOT recommending sha-crypt, as it does a poor job of resisting cracking attacks compared to all of the others. Its main use should be legacy interop with libcrypt.

tarcieri avatar Feb 09 '21 16:02 tarcieri