Join me on my quest to seek out and destroy weak passwords and weak password storage everywhere!
With PBKDF2/RFC2898/PKCS#5v2, BCrypt, and Scrypt, sufficiently long cryptographically random per-user salts, and iterations in the tens of thousands or sufficiently high work factors we will defeat the lesser foe, weak password storage!
With education, sufficiently large keyspaces, nigh-unlimited maximum lengths, sufficiently long minimum lengths, and rules-based dictionary lookup exclusions, in time we will defeat the even more fearsome enemy of the weak password itself!
Q&A for Information security professionals
Q&A for professional and enthusiast programmers
Q&A for database professionals who wish to improve their database skills and learn from others in the community
Q&A for software developers, mathematicians and others interested in cryptography
Q&A for peer programmer code reviews
Q&A for professional system and network administrators
Q&A for gamemasters and players of tabletop, paper-and-pencil role-playing games