I've heard that hash algorithms like bcrypt
are more secure because they take longer to complete, and therefore take much longer to brute force, without a noticeable delay for legitimate users. Would using a faster algorithm, such as SHA-256, multiple times, be secure? For example:
hash = "password"
for x in range(5000):
hash = hashlib.sha256(hash).hexdigest
As it has to hash the data, then hash the hash, and so on, taking much longer than a single SHA-256 hash, wouldn't histhis accomplish the same thing?