I would prefer a more random salt for SHA1. Furthermore you should use SSHA - a different salt for each user. This would make it even more secure.
Furthermore you could use serendipityHashType = 1 for SHA1 and if supported by the local PHP installation 2 for SHA256 (maybe using the hashtype as ...
Search found 1 match
- Wed Feb 18, 2009 7:52 pm
- Forum: Development
- Topic: New login hashing
- Replies: 2
- Views: 3119