[fpc-pascal] is scrypt available?

wkitty42 at windstream.net wkitty42 at windstream.net
Tue Oct 27 03:02:23 CET 2015


On 10/26/2015 06:28 PM, David W Noon wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Mon, 26 Oct 2015 16:54:16 -0400, Wkitty42 (wkitty42 at windstream.net)
> wrote about "Re: [fpc-pascal] is scrypt available?" (in
> <562E92F8.1010800 at windstream.net>):
>
> [snip]
>> no, i haven't heard of dcrypt... i'm specifically after scrypt for
>> securing passwords in a database...
>
> So what you are really after is a hash, rather than streaming or block
> cryptography.

pretty much, yes...

> I use PostgreSQL, which offers MD5 hashing of passwords as a built-in,
> without me adding any of my own (or anybody else's) code to perform
> hashing.

sadly MD5 have been being cracked in little time for over a decade... that's why 
we're looking at other means... bcrypt came up first in the searched and then 
scrypt was pointed out along with bcrypt's failings... the question now is being 
able/willing to use someone else's code or to reinvent the wheel... if it were 
me, i'd use the other code if its license fits the app in question...

> HTH

it does... it is always good to hear from you, too :)

-- 
  NOTE: No off-list assistance is given without prior approval.
        *Please keep mailing list traffic on the list* unless
        private contact is specifically requested and granted.



More information about the fpc-pascal mailing list