Hackerfleet / hfos-legacy

Hackerfleet Operating System
GNU Affero General Public License v3.0
29 stars 4 forks source link

Find compatible secure hash algorithm #198

Closed ri0t closed 7 years ago

ri0t commented 7 years ago

One that is available on javascript as well. Python's passlib should support most secure, current hash functions.

Up until now (for prototyping purposes), we were still using md5 - and didn't even salt it - yuck!

ri0t commented 7 years ago

I'd say blake2:

(Caution: blake2s is optimized for 8-32-bit, whereas blake2b is optimized for 64 bit)

Oh, FWIW, it is also available with ZMQ, via libsodium.

ri0t commented 7 years ago

This one goes hand in hand with #197

ri0t commented 7 years ago

After discussion with @MichaelKreil, i decided to skip that. Since #201 is fixed - USE SSL!!

For internal database hashing, we now use sha512 (available on py 2.x as well)