search

RustCrypto / password-hashes

Password hashing functions / KDFs
612 stars 79 forks source link

Recommended password hashing algorithms #133

Open tarcieri opened 3 years ago

tarcieri commented 3 years ago

Following up from https://github.com/RustCrypto/meta/issues/10, this is an issue for discussion potentially adding "recommended" badges to certain algorithms in this repo:

Recommended: Yes

tarcieri commented 3 years ago

I'd vote for recommending argon2 and scrypt.

I think it's worth considering NOT recommending sha-crypt, as it does a poor job of resisting cracking attacks compared to all of the others. Its main use should be legacy interop with libcrypt.