Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

So the original question remains, is it possible with bcrypt?


I don't know, but Oliver Hunt suggested just validating the password on the next login and upgrading it on the fly, which, to be honest, is what I'd probably do.


  import bcrypt
  hashed = bcrypt.hashpw(password, bcrypt.gensalt(log_rounds=13))
Increasing log_rounds by one increases the work factor exponentially (2 * * log_rounds).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: