Password Storage Cheat Sheet
The only way to slow down offline attacks is by carefully choosing hash algorithms that are as resource intensive as possible.
- from
- IAM
- added
- 2026-10-10
- likes
- 0
similar
-
Optimizing The Computation Of Password Hashes (2023) helda.helsinki.fi
-
How to change the hashing scheme of already hashed user's passwords news.ycombinator.com
Good news: you're not stuck with a legacy password saving scheme. Here is a trick to transparently upgrade to stronger hashing algorithm.
-
-
Lifetimes of cryptographic hash functions valerieaurora.org
“If you are using compare-by-hash to generate addresses for data that can be supplied by malicious users, you should have a plan to migrate to a new hash every few years”.
-
Smashing Hashes with Token Swapping Attacks jakewnuk.com
-
Practical Recommendations for Stronger, More Usable Passwords andrew.cmu.edu
This study recommend the association of: blocklist checks against commonly leaked passwords, password policies without character-class requirements, minimum-strength policies.
IAM › Password-based auth: “The only way to slow down offline attacks is by carefully choosing hash algorithms that are as resource intensive as possible.”