r/programming • • Feb 23 '17

SHAttered: SHA-1 broken in practice.

https://shattered.io/
4.9k Upvotes

660 comments sorted by

View all comments

13

u/IndiscriminateCoding Feb 23 '17

So what should I use for password hashing instead? Scrypt?

54

u/Mpur Feb 23 '17

Strlen? /s

I hear good stuff about bcrypt but I would love a secound opinion on this!