New answers tagged argon2
1
I'm prototyping an app that uses client-side password hashing in order to hide the "real" account password from a server (the server hashes any recieved password anyway, so no plaintext records in the database). It seem to be a controversial thing to do but I didn't find any convincing arguments against it (I'm new to cryptography so please correct me if I'm ...
1
It seem to be a controversial thing to do but I didn't find any convincing arguments against it
It can be a good solution if you can transmit the salt from the server to the client, e.g. in apps or desktop apps and has some nice load-distribution properties.
the server hashes any recieved password anyway, so no plaintext records in the database
This is ...
Top 50 recent answers are included
