Return to Answer

Leave it for the experts. Leave it for people who's job it is to maintain these libraries. If you need to make a decision, you're doing it wrong.

Leave it for the experts. Leave it for people whose job it is to maintain these libraries. If you need to make a decision, you're doing it wrong.

function register($username, $password) { $hash = password_hash($password, PASSWORD_BCRYPT); save($user, $hash); } function login($username, $password) { $hash = loadHashByUsername($username); if (password_verify($password, $hash)) { //login } else { // failure } } 

function register($username, $password) { $hash = password_hash($password, PASSWORD_BCRYPT); save($username, $hash); } function login($username, $password) { $hash = loadHashByUsername($username); if (password_verify($password, $hash)) { //login } else { // failure } } 

• Code: cvsweb
• Project Site: on OpenWall
• A review of the < 5.3.0 algorithm: on StackOverflow

• Fundamental Difference Between Hashing And Encryption Algorithms - Explaining the terminology and some basic information about them.
• About reversing hashes without rainbow tables - Basically why we should use bcrypt in the first place...
• Storing bcrypt Hashes - basically why is the salt and algorithm included in the hash result.
• How to update the cost of bcrypt hashes - basically how to choose and then maintain the cost of the bcrypt hash.
• How to hash long passwords with bcrypt - explaining the 72 character password limit of bcrypt.
• How bcrypt uses salts
• Best practices of salting and peppering passwords - Basically, don't use a "pepper"
• Migrating old md5 passwords to bcrypt

• Code: cvsweb
• Project Site: on OpenWall
• A review of the < 5.3.0 algorithm: on StackOverflow

• Fundamental Difference Between Hashing And Encryption Algorithms - Explaining the terminology and some basic information about them.
• About reversing hashes without rainbow tables - Basically why we should use bcrypt in the first place...
• Storing bcrypt Hashes - basically why is the salt and algorithm included in the hash result.
• How to update the cost of bcrypt hashes - basically how to choose and then maintain the cost of the bcrypt hash.
• How to hash long passwords with bcrypt - explaining the 72 character password limit of bcrypt.
• How bcrypt uses salts
• Best practices of salting and peppering passwords - Basically, don't use a "pepper"
• Migrating old md5 passwords to bcrypt