snap-cloud / snap-cloud-rails

DEPRECATED -- A prototype Rails-based cloud service for Snap! Go Here →
https://github.com/bromagosa/snapCloud
GNU Affero General Public License v3.0
5 stars 1 forks source link

Improve the Default Hashing Algorithm #119

Open cycomachead opened 9 years ago

cycomachead commented 9 years ago

Been doing some reading about scrypt which is supposedly hard to crack than bcrypt.

See: http://blog.codinghorror.com/your-password-is-too-damn-short/

There is an existing gem which also works with devise. It would be good to do this before any public user accounts exist.

cycomachead commented 9 years ago

See also: https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2015/march/enough-with-the-salts-updates-on-secure-password-schemes/