SHA-2 Family

Creator

Creator

Seonglae Cho

Created

Created

2020 Jun 21 6:43

Editor

Editor

Seonglae Cho

Edited

Edited

2024 Apr 17 5:30

Refs

Refs

SHA-2 is not good enough for password because, like most general purpose hashes, it's fast

Designed by
NSA

SHA-256 outputs 32 bytes

SHA-512 outputs 64 bytes

Intel extended x86 to include SHA operations in hardware

SHA-2 Families

Is MD5 considered insecure?

Using salted md5 for passwords is a bad idea. Not because of MD5's cryptographic weaknesses, but because it's fast. This means that an attacker can try billions of candidate passwords per second on a single GPU. What you should use are deliberately slow hash constructions, such as scrypt, bcrypt and PBKDF2.

https://security.stackexchange.com/questions/19906/is-md5-considered-insecure

Recommendations

////////