Shulou(Shulou.com)06/02 Report--

This article will explain in detail how to use the bcrypt hash password in PHP. The editor thinks it is very practical, so I share it with you as a reference. I hope you can get something after reading this article.

I occasionally hear the suggestion that "use bcrypt to store passwords in PHP, bcrypt rules."

But what bcrypt? PHP doesn't provide any such functionality, Wikipedia's endless chatter about file encryption utilities, and Web search just reveals Blowfish implementations in several different languages. Now Blowfish can also get mcrypt through PHP, but how does this help to store passwords? Puffer fish is a universal password that works in two ways. If it can be encrypted, it can be decrypted. The password requires an one-way hash function.

What is an explanation?

Bcrypt is a hashing algorithm that can be extended by hardware (through a configurable number of cycles). Its slowness and multiple rounds ensure that attackers must deploy large amounts of money and hardware to crack passwords. Add to each password salt (bcrypt requires salt), and you can be sure that an attack is actually not feasible, with no ridiculous amount or hardware.

Bcrypt uses the Eksblowfish algorithm to hash passwords. Although the encryption phases of Eksblowfish and Blowfish are exactly the same, the critical scheduling phase of Eksblowfish ensures that any subsequent state depends on salt and key (user password) and that the state cannot be pre-calculated without knowing both. Because of this key difference, bcrypt is an one-way hashing algorithm. If you do not know the salt, circle and password (password), you cannot retrieve the plain text password. [source]

How to use bcrypt: using PHP > = 5.5-DEV

The password hash function is now built directly into PHP > = 5. 5. You can now use password_hash () to create a hash of any bcrypt password:

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.