6 ms·
You could always pre-hash the password with sha256 or something similar to guarantee you won't go over the 72 byte limit.
by cwbriscoe 10mo ago
You could always pre-hash the password with sha256 or something similar to guarantee you won't go over the 72 byte limit.
- stavros 10mo agoI don't understand why this isn't a mandatory first step in the bcrypt algorithm itself. Who thought that a 72 byte limit was a good idea?