<turbo-stream action="append" target="posts_list"><template>    <div class="postbit" id="196124" data-post-id="196124">
  <section>
    <div class="post-wrap">


					<div class="post-header">
		        <div class="user-avatar">
		          <img alt="Aetherus" src="https://forum.elixirforum.com/user_avatar/forum.elixirforum.com/Aetherus/120/17203_2.png" width="120" height="120" />
		        </div>
					
						<div class="user-details">
		          <div class="user-name">
		            <h3>
                  Aetherus
                  </h3>
		          </div>
						
						</div>
					
					</div>

	        <div class="thread-main">
	            <div class="post-body" data-turbo="false">
								<p>All the methods listed by <a class="mention" href="/u/kokolegorille" rel="nofollow">@kokolegorille</a> are hashing methods that are irreversible, and they are all designed to be slow so that it’s infeasible to brute-force the original password.</p>
<ul>
<li>PBKDF2 is CPU-proof (meaning you are unable to crack the original password using only some CPUs) but not GPU-proof.</li>
<li>BCrypt is both CPU-proof and GPU-proof, but may be vulnerable to quantum computers.</li>
<li>Argon2 is safe to all known brute-force and rainbow table attacking vectors.</li>
</ul> 
	            </div>

	            <div class="base-line">
	                <div class="thread-counters">
	                    <span class="thread-count count-likes js-likers-trigger" title="Likes" data-post-id="196124" data-batch-url="/posts/batch_likers">
                        10
                      </span>
                      <!-- <span class="thread-count js-solved-indicator" title="Marked as solution"></span> -->
	                </div>
	                <div class="go-to-post">
	                  <a title="Go to post" alt="Go to post" href="https://forum.elixirforum.com/t/which-library-is-the-best-for-encryption-in-phoenix/35905/13">Post #12</a>
	                </div>
	            </div>
              <div id="likers-container-196124" 
                   class="likers-container"
                   data-first-post="false"
                   data-batch-url="/posts/batch_likers">
                   <div class="likers-placeholder" 
                     data-likers-post-id="196124"
                     data-batch-url="/posts/batch_likers">
                  <div class="post-likers"></div>
                </div>
              </div>
	        </div>
			

    </div>

    <div class="triangle-top-right type-standard-post cat-standard-post" title="Post #12"></div>
  </section>
</div>
    <div class="postbit" id="196133" data-post-id="196133">
  <section>
    <div class="post-wrap">


					<div class="post-header">
		        <div class="user-avatar">
		          <img alt="hauleth" src="https://forum.elixirforum.com/user_avatar/forum.elixirforum.com/hauleth/120/18942_2.png" width="120" height="120" />
		        </div>
					
						<div class="user-details">
		          <div class="user-name">
		            <h3>
                  hauleth
                  </h3>
		          </div>
						
						</div>
					
					</div>

	        <div class="thread-main">
	            <div class="post-body" data-turbo="false">
								<p>You should never, ever, <strong>EVER</strong> encrypt passwords for storage. You always hash them with KDF like already mentioned by <a class="mention" href="/u/kokolegorille" rel="nofollow">@kokolegorille</a>. In exactly the same order they listed them:</p>
<ol>
<li>Argon2</li>
<li>If above is out of question then crypt</li>
<li>If none of the above fits the bill (or you need to be NIST certified) then you go with PBKDF2</li>
</ol>
<p>Alternatively there are other algorithms, but as you asked this question, then I would say that you should use one of the mentioned above.</p> 
	            </div>

	            <div class="base-line">
	                <div class="thread-counters">
	                    <span class="thread-count count-likes js-likers-trigger" title="Likes" data-post-id="196133" data-batch-url="/posts/batch_likers">
                        7
                      </span>
                      <!-- <span class="thread-count js-solved-indicator" title="Marked as solution"></span> -->
	                </div>
	                <div class="go-to-post">
	                  <a title="Go to post" alt="Go to post" href="https://forum.elixirforum.com/t/which-library-is-the-best-for-encryption-in-phoenix/35905/14">Post #13</a>
	                </div>
	            </div>
              <div id="likers-container-196133" 
                   class="likers-container"
                   data-first-post="false"
                   data-batch-url="/posts/batch_likers">
                   <div class="likers-placeholder" 
                     data-likers-post-id="196133"
                     data-batch-url="/posts/batch_likers">
                  <div class="post-likers"></div>
                </div>
              </div>
	        </div>
			

    </div>

    <div class="triangle-top-right type-standard-post cat-standard-post" title="Post #13"></div>
  </section>
</div>
    <div class="postbit" id="196797" data-post-id="196797">
  <section>
    <div class="post-wrap">


					<div class="post-header">
		        <div class="user-avatar">
		          <img alt="kenny-evitt" src="/assets/icons/user-9f439610.png" width="120" height="120" />
		        </div>
					
						<div class="user-details">
		          <div class="user-name">
		            <h3>
                  kenny-evitt
                  </h3>
		          </div>
						
						</div>
					
					</div>

	        <div class="thread-main">
	            <div class="post-body" data-turbo="false">
								<p>There’s an ‘official’ Phoenix auth generator that’s very nice:</p>
<ul>
<li><a href="https://hexdocs.pm/phx_gen_auth/overview.html" rel="noopener nofollow ugc">Overview — phx_gen_auth v0.6.0</a></li>
</ul>
<p>I ran the Mix task for the generator on a project recently and adapted the generated code. I used Argon2 for password hashing.</p>
<p><code>comeonin</code> – something like the standard password hashing ‘interface’ – recommends using Argon2:</p>
<ul>
<li><a href="https://github.com/riverrun/comeonin" rel="noopener nofollow ugc">riverrun/comeonin: Password hashing specification for the Elixir programming language</a></li>
</ul> 
	            </div>

	            <div class="base-line">
	                <div class="thread-counters">
	                    <span class="thread-count count-likes js-likers-trigger" title="Likes" data-post-id="196797" data-batch-url="/posts/batch_likers">
                        2
                      </span>
                      <!-- <span class="thread-count js-solved-indicator" title="Marked as solution"></span> -->
	                </div>
	                <div class="go-to-post">
	                  <a title="Go to post" alt="Go to post" href="https://forum.elixirforum.com/t/which-library-is-the-best-for-encryption-in-phoenix/35905/15">Post #14</a>
	                </div>
	            </div>
              <div id="likers-container-196797" 
                   class="likers-container"
                   data-first-post="false"
                   data-batch-url="/posts/batch_likers">
                   <div class="likers-placeholder" 
                     data-likers-post-id="196797"
                     data-batch-url="/posts/batch_likers">
                  <div class="post-likers"></div>
                </div>
              </div>
	        </div>
			

    </div>

    <div class="triangle-top-right type-last-post cat-last-post" title="Last post!"></div>
  </section>
</div>
</template></turbo-stream><turbo-stream action="replace" target="load-more-container"><template><div id="load-more-container" class="load-more-container">
    <span class="all-loaded">— All posts loaded —</span>
</div></template></turbo-stream>