top | item 45949183

(no title)

cwbriscoe | 3 months ago

You could always pre-hash the password with sha256 or something similar to guarantee you won't go over the 72 byte limit.

discuss

order

stavros|3 months ago

I don't understand why this isn't a mandatory first step in the bcrypt algorithm itself. Who thought that a 72 byte limit was a good idea?