一种单向密码加密算法
加密密码最安全的一种加密算法是什么?
MD5 和 SHA (1..512) 经常使用,但它们的设计目的是提高速度,但不利于防止对加密密码的暴力攻击。
该算法不应该太奇特,以便它可以与 Java、.NET 或 Python 等常见编程语言/运行时一起使用。
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(3)
BCrypt 或 SCrypt。为什么?因为它们的设计目的是慢而不是快。
另请参阅:如何安全地散列密码? ://security.stackexchange.com">security.stackexchange.com
BCrypt or SCrypt. Why? because they where designed to be slow instead of fast.
see also: How to securely hash passwords? on security.stackexchange.com
仅仅哈希并不能拯救你,正如可以在有关该主题的其他帖子中读到的那样。
bcrypt 和 scrypt 确实是不错的选择,但大多数语言并不支持它们。尽管找到支持它们的库确实不成问题。除了这两种之外,您还可以使用基于密码的加密 (PBE),如 中所述PKCS#5,最好与 PBKDF2 一起使用。几乎任何地方都应该有对 PBE 的内置支持。
Hashing alone won't save you, as can be read in other posts on the topic.
bcrypt and scrypt are indeed good choices, but they're not supported out of the box by most languages. Although it really shouldn't be a problem to find a library that supports them. In addition to these two, you could use password-based encryption (PBE) as described in PKCS#5, ideally with PBKDF2. There should be built-in support for PBE almost anywhere.
人们正在使用 BCrypt,一种加密方法,因为它非常慢。
请参阅:http://codahale.com/how-to-safely-store -a-password/ 和 http://www.openwall.com/crypt/
另外看看这个问题: https://security.stackexchange.com/questions/ 4781/做任何安全专家推荐bcrypt-for-password-storage
SHA512 与 Blowfish 和 Bcrypt
https://security.stackexchange.com/questions/211/how-to-securely-hash-密码
People are using BCrypt, a cryptography method, because it's very slow.
See: http://codahale.com/how-to-safely-store-a-password/ and http://www.openwall.com/crypt/
Also take a look at this question: https://security.stackexchange.com/questions/4781/do-any-security-experts-recommend-bcrypt-for-password-storage
SHA512 vs. Blowfish and Bcrypt
https://security.stackexchange.com/questions/211/how-to-securely-hash-passwords