WebAppSec/Secure Coding Guidelines: Difference between revisions

Undo revision 357368 by Yorickpeterse (talk)
(Undo revision 357368 by Yorickpeterse (talk))
Line 74: Line 74:
===Password Storage===
===Password Storage===


Passwords stored in a database should use [https://en.wikipedia.org/wiki/Bcrypt bcrypt].
Passwords stored in a database should use [https://en.wikipedia.org/wiki/Bcrypt
Bcrypt is a hashing algorithm designer to keep up with Moore's law.
bcrypt].Bcrypt is a hashing algorithm designer to keep up with Moore's law.
General hashing algorithms such as SHA512 can be used to generate hashes very
General hashing algorithms such as SHA512 can be used to generate hashes very
fast depending on the hardware used. If computer B is 10 times faster than
fast depending on the hardware used. If computer B is 10 times faster than
Confirmed users
491

edits