Why BCrypt?
diogob opened this issue · 0 comments
diogob commented
From what I could gather from the library code and docs the tokens are generated with a good source of entropy and do have a fixed lifestyle. Taking this into account wouldn't make more sense to use a fast hashing algorithm such as sha-2 ?
This would greatly lower the computational cost without any sacrifice of security. Or am I missing something?