Is it necessary to save the salt when generating a random salt for every password-hash? I recently came across the question of whether it is necessary to save the salt…
The Impact of Character-Shifting on Password SecurityApplying a transform on passwords before hashing them makes no direct harm to security as long as it is injective: two distinct passwords before…
Working Around the 72-Character Limit of BCrypt BCrypt is a hashing algorithm commonly used for password hashing. However, it has a 72-character limit on the plaintext being hashed, which can…
Exploring Password-Based Key Derivation Systems: scrypt and bcryptIn this article, I discuss the concepts of password-based key derivation and explore two popular systems, scrypt and bcrypt. I provide insights into…
Choosing a Password Hashing Method: Bcrypt, Scrypt, and MoreIn cryptography, "new" is not synonymous to "good". That bcrypt is twelve years old (12 years... is that really "old" ?) just…