MD5 is better than crypt, SHA1 beats MD5, but it's looking like bcrypt is the best current option:

Enough With The Rainbow Tables: What You Need To Know About Secure Password Schemes

The short version boils down to that computers are really fast and most digest algorithms (like MD5 and SHA1) are designed to run quickly, meaning that a cracker who gets his hands on your password database can process very large numbers of attempts in a reasonable period of time, which makes brute-force cracking feasible.

bcrypt, on the other hand, is designed to be slow today and easily tunable to be even slower as computers get faster. If it takes, say, a tenth of a second to bcrypt a password for your system, then users won't notice any difference, but crackers will only be able to process 10 attempts per second instead of the millions of MD5 or SHA1 hashes they could generate. End result: Greatly reduced susceptibility to brute-force cracking.


In reply to Re: Storing encrypted passwords and validating by dsheroh
in thread Storing encrypted passwords and validating by zerohero

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":



  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.