Are SHA-512 and Whirlpool considered acceptable? | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

FooBarWidget on May 3, 2009 | parent | context | favorite | on: Can you trust 37signals with your password?

Are SHA-512 and Whirlpool considered acceptable?

tptacek on May 3, 2009 [–]

SHA-512 and Whirlpool are still designed to be very fast. The point is, you want to slow down the password hashing operation. So SHA-512, SHA-256, and SHA-1 are all fine, as long as you iterate them several thousand times.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact