matiu2 / witty-plus

A base application under http://webtoolkit.eu .. adds users and logins
8 stars 4 forks source link

upgrade password hash to sha256 or 512 #5

Closed matiu2 closed 13 years ago

matiu2 commented 13 years ago

At the moment it is sha1 which gives a 160 bit hash ..

maybe 256 or 512 bits would be better.

Adjust the session cookie size accordingly.

256 bit = 256 / 8 (bytes) * 4 / 3 (for base64 encoding) and so on..

matiu2 commented 13 years ago

Will handle as part of #7