Password hashing compatible with Java and PHP

Question

Is there a secure password hashing library (e.g. phpass) or hashing method that I can easily use in both PHP and Java?

MD5/SHA256 are both available in both Java and PHP natively. — Adam, Apr 09 '12 at 20:52

score 7 · Accepted Answer · edited May 23 '17 at 11:46

If you want do the easy thing, you can use sha-N with salt. (N being 1, 256 or 512)

Jeff Atwood did a nice blog post on that recently, saying that bcrypt and PBKDF2 are the best options.

In PHP you can use bcrypt (and in Java too)

Related topics:

Resouces:

score 2 · Answer 2 · answered Apr 09 '12 at 20:53

2

Any standard library such as SHA*, MD* will do. SHA>2 is recommended (e.g. SHA512).

answered Apr 09 '12 at 20:53

j13r

score 0 · Answer 3 · answered Apr 09 '12 at 20:55

0

md5 and SHA with salt are the most widely used ones.

answered Apr 09 '12 at 20:55

Anurag Ramdasan

3 Answers3