If you're in trouble and cannot find an answer to a question which goes beyond Stack Overflow...

If you have a not-so-usual solution for your problems but need to justify it to your boss...

If you like to think on your own rather than blindly follow "common wisdom" and "profound truth"...

...then 'No Bugs' Hare on Soft.ware might be the right place for you.

Your mileage may vary. Batteries not included

Assorted Rants Tagged ‘Password’, page 1:

Password Hashing: Why and How

posted March 7, 2016 by "No Bugs" Hare

Abstract:	Password hashing is a Big Headache, and doing it right is complicated
Quote:	“Note that none of the C++11 random number engines (LCG, Mersenne-Twister, or Lagged Fibonacci) can be considered good enough for cryptographic purposes – in short, they’re way too predictable and can be broken by a determined attacker, given enough output has leaked.”
	[→]

posted August 10, 2015 by "Sergeant Major" Hare

Abstract:	Client-Side password hashing (in addition to existing server-side hashing) can improve resilience to brute-force attacks.
Quote:	“Even if client-side is 10x slower than server-side, it leaves us with 10x improvement which is certainly a good thing to have”
	[→]

posted July 20, 2015 by "No Bugs" Hare

Quote:	“What is practically very important – is to keep all the “unsanitized” data in one place.”
Another Quote:	“What will happen if attacker got the whole database of your users’ passwords?”
	[→]