What’s the best algorithm for storing passwords? MD5, SHA256, PBKDF2, BCrypt, Scrypt, ARGON2? Let’s review the status of hashing in 2020.

We’re less interested in empowering developers and a lot more pessimistic about the prospects of getting this stuff right.
There are, in the literature and in the most sophisticated modern systems, “better” answers for many of these items. If you’re building for low-footprint embedded systems, you can use STROBE and a sound, modern, authenticated encryption stack entirely out of a single SHA-3-like sponge constructions. You can use NOISE to build a secure transport protocol with its own AKE.

2017 2016 2015