Hashing Passwords: Why MD5 and SHA Are Outdated, and Why You Should Use Scrypt or Bcrypt

#bcrypt #md5 #password #scrypt #sha

https://dev.to/lovestaco/hashing-passwords-why-md5-and-sha-are-outdated-and-why-you-should-use-scrypt-or-bcrypt-48p2

#Scrypt is maximally memory-hard

https://eprint.iacr.org/2016/989

#Rust #memorysafety

https://developer.okta.com/blog/2022/03/18/programming-security-and-why-rust

https://towardsdev.com/mastering-memory-safety-in-rust-understanding-ownership-borrowing-and-lifetimes-ac49f00ab21d

With syncthing the encryption is realized using Xchachapoly aes-siv and #scrypt is used for primary key derivation. this makes it robust against even state based attackers unlike #pbkdf2

📝 #NoteToSelf: Write an #scrypt key backend for #gitAnnex to securely store secrets in a #git repository. The default (unsalted #SHA256 with the file size known) is good for file integrity but not ideal for secrets.

https://git-annex.branchable.com/backends/

Сменил пул, нашёл на процессоре 1 шару
И определился хэшрейт.
Алгоритм: scrypt
Pool: idpool.xyz
Сложно он какой-то даётся железу.
#mining #scrypt #idpool.xyz #cpu

Feedback/comments needed.
(if anyone read this..)
I did a simple password hashing golang package that i’ll use to store passwords.
Leveraging « modern » password hash primitives: argon2id / scrypt.
I tried to be careful in parameters for the key derivation, but scared to fuck up badly...
(And started a C interoperable version as well but not finished/published yet).

https://git.sr.ht/~eau/passwd

#phc #password-hashing #golang #argon2 #scrypt

A quick (few hours) attempt at making password hashing/comparison modern and simple in go based code/services in a small package relying on standard go library/implementation:
Https://github.com/unix4fun/passwd
Filling my own needs, work in progress, but may be other go ppl would be interested.
#golang #argon2 #scrypt #KISS