Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

What is it being used for, and how is it being used? I'm guessing this is password hashes. Is rails using a unique salt for each password?

Bcrypt is slower than SHA512, in fact it can be made to be very slow. This is actually ideal for password hashes, it doesn't matter if it takes your server 50 milliseconds to calculate a password hash but that would severely slow down an attack.

It is important however that they are being used correctly. Either would be a good solution if properly salted.




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: