Re: Bcrypt Authenticate plugin

In the meantime this does the trick:

http://www.mark-story.com/posts/view/using-bcrypt-for-passwords-in-cakephp

You might want to consider adding an individual salt and HMAC operation as per:

https://wiki.mozilla.org/WebAppSec/Secure_Coding_Guidelines#Password_Storage

Cheers,

On Thu, Aug 23, 2012 at 5:07 AM, Thiago Belem <contato@thiagobelem.net> wrote:

Oh gosh.. I've almost reinvented the wheel :P

I've already updated my project to use the native blowfish algo, thank you! :)

--
You received this message because you are subscribed to the Google Groups "CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com.
To unsubscribe from this group, send email to cake-php+unsubscribe@googlegroups.com.
Visit this group at http://groups.google.com/group/cake-php?hl=en-US.
 
 

--
You received this message because you are subscribed to the Google Groups "CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com.
To unsubscribe from this group, send email to cake-php+unsubscribe@googlegroups.com.
Visit this group at http://groups.google.com/group/cake-php?hl=en-US.