I am aware. I did read it before I posted it. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

SoftwareMaven on March 19, 2012 | parent | context | favorite | on: Don't use bcrypt

I am aware. I did read it before I posted it.

tptacek on March 19, 2012 [–]

So you think maybe Hugo Krawczyk is mistaken? :)

Short answer: I think scrypt is an advancement over the class of constructions HKDF belongs to. If you're picking nits about which function to use, use scrypt.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact