DEV Community

Discussion on: BCrypt Explained

Collapse
 
moisesguimaraes profile image
Moisés Guimarães de Medeiros

Overall is a very good article about the topic. But I find it misleading a bit when you say:

... some other common "general purpose" hash functions, MD5, SHA1, SHA2, SHA3 are fast, but insecure.

MD5, yes, that one definitely shouldn't be around anymore in anything related with security.

SHA1 might be stronger than MD5, but its days are also done since the collision attacks discovery back in 2017.

SHA2 and SHA3 otherwise are still strong options for data integrity and other security features that revolves around it. But yes, you shouldn't use them for password "encryption" when we have better options as bcrypt.