search

bitpiston / oyster

A Perl web application framework.
Other
3 stars 1 forks source link

Upgrade user passwords to SHA-512 and add salting #41

Closed einkoro closed 11 years ago

einkoro commented 12 years ago

We should bump the encryption up from SHA-256 to SHA-512 for passwords as cracking them is becoming considerably easier with GPU assisted computing. Adding a salt to the encryption process would be beneficial as well.

einkoro commented 11 years ago

http://www.rhyous.com/2012/06/18/how-to-effectively-salt-a-password-stored-as-a-hash-in-a-database/

einkoro commented 11 years ago

Added in bc3f34894aa7be0259b75f93ea8b1bbb38bd712f and 90e5f754c48cf0a0c9bf08660c2e98cf431d4a19 – user module still needs to be edited to use the new hashing with salts.