Better crypto for storing passwords
authorRogdham <contact@rogdham.net>
Thu, 30 Aug 2012 14:40:02 +0000 (16:40 +0200)
committerRogdham <contact@rogdham.net>
Thu, 30 Aug 2012 14:53:33 +0000 (16:53 +0200)
Instead of hash(passwd), store hash(SALT, key, passwd) where:
 - SALT is application-specific
 - key is random and changed each time passwd changes

To login as admin the first time, go and see /login/1/victory


No differences found