133 reputation
5
bio website
location
age
visits member for 2 years, 7 months
seen Mar 27 at 20:02

Niklas Rosencrantz (Stockholm, Sweden)


Mar
20
awarded  Popular Question
Sep
9
comment SHA1 usage for passwords, alternatives and advantages?
I agree. It worked being comptaible with SHA1 and MD5 at the same time so I suppose I can stay compatible with many algorithms and definitely use those that are specifically recommended as password hashing algorithms (not just a hashing algorithm but spec designed for passwords)
Sep
9
comment SHA1 usage for passwords, alternatives and advantages?
Thank you for the information. I should have an algorithm spec designed for passwords and now I understand some other than SHA! also could be preferred since SHA1 isn't specifically for passwords. And crypt is something old like DES? I see why they imported crypt, it was for compatibility: __Added support for crypt hashing of passwords, mostly to support easy porting from existing Unix-based legacy apps. __
Sep
5
awarded  Student
Sep
5
comment SHA1 usage for passwords, alternatives and advantages?
Thank you for the insights. Both code and password database could be compromised with email addresses and a user may use the same password for different services so I want to protect from brute force attacks. Now I understand what the weakness with SHA1 can be compared to crypt. I look at how django implemented passwords with python and django supports SHA1, old MD5 for backwards-compatibility and also crypt (from code.djangoproject.com/browser/django/trunk/django)
Sep
5
awarded  Scholar
Sep
5
accepted SHA1 usage for passwords, alternatives and advantages?
Sep
5
comment SHA1 usage for passwords, alternatives and advantages?
Thank you Paulo for a great answer. Today I looked at how django has implemented a solution and they are making algorithm configurable: if algorithm == 'crypt': ... elif algorithm == 'sha1': in the method django.contrib.auth.utils.get_hexdigest so I can look how django allows different algorithms to be used (crypt, sha1, md5) and therefore I may do an import crypt similarly to django (code.djangoproject.com/browser/django/trunk/django).
Sep
5
awarded  Supporter
Sep
5
asked SHA1 usage for passwords, alternatives and advantages?
Sep
5
awarded  Autobiographer