credential
credential copied to clipboard
ericelliott
Easy password hashing and verification in Node. Protects against brute force, rainbow tables, and timing attacks.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.  #### Changes included in this PR - Changes to...
`createSalt` generates `keyLength` bytes and then transform it in a base64 string. This string is passed to `pbkdf2` as salt, but pbkdf2 treats strings as utf8, so the given salt...
Default settings of PBKDF2-SHA1 with output length of 66 bytes is bad. The way PBKDF2 works the defender is doing 4 times more work than an attacker. There should be...
Hi there ! I hope I'm not putting this message at the wrong place. I'm working in a team and our project is using your package `"credential": "^2.0.0"` I was...
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.  #### Changes included in this PR - Changes to...
Metadata
Owner
Metadata
Easy password hashing and verification in Node. Protects against brute force, rainbow tables, and timing attacks.