search

aholbreich / crypto

Collection of cryptography related examples
MIT License
2 stars 1 forks source link

SHA2 isn't suitable for passwords #1

Closed paragonie-scott closed 8 years ago

paragonie-scott commented 8 years ago

https://github.com/aholbreich/crypto/blob/master/src/org/holbreich/crypto/examle/hash/SHA2HashingExample.java

Someone reading this code might walk away with the incorrect idea that SHA256 is fine for password storage.

Better recommendations include: bcrypt, scrypt, and Argon2i.

aholbreich commented 8 years ago

Nice hint. thx

aholbreich commented 8 years ago

I somehowe lost the the e-mail related to this issue here. But fixed now. Thank you for feedback!