Hacker GitHub

← All repos

dannysu/hash0

View on GitHub ↗ ★ 14 JavaScript

Synchronizable PBKDF2 based password generator

4 mentions on Hacker News by 1 person: 0 stories, 4 comments · first 2014-12-30 · latest 2017-07-15

Mentions per year 4 mentions · busiest year 2014 (2)
20082026
  1. …is very weak. It uses just one round of 1 round of HMAC-MD5. Not even a slow hash function. See https://github.com/dannysu/hash0 for comparison of other similar sites that all have the same flaw and the reason I coded hash0 (no longer…
  2. …I switched from CryptoJS to SJCL, and have hash0 do 100,000 iterations instead of vault's 8. [1]: https://github.com/dannysu/hash0 [2]: http://crypto.stanford.edu/sjcl/
    comment by dannysu · 2015-06-27 · in Master Password
  3. I pretty much wrote hash0 ( https://github.com/dannysu/hash0 ) for most reasons you listed. Would love more auditing if you're interested to take a look.
  4. …https://news.ycombinator.com/item?id=8753534 [1]: http://www.alexhornung.com/code/bpasswd/ [2]: https://github.com/dannysu/hash0