Password Hashing and Salting - Recommended Reading

Looking for recommendations for *credible* information on implementing
password hashing and salting. I did my own search and came up with a bunch
of somewhat contradictory often "shooting-from-the-hip" and
advertisement-laden pages... looking for something more academic with an
objective treatment of the topic.
Thanks!Keith Brown has a brief explanation here:
http://msdn.microsoft.com/msdnmag/i...SecurityBriefs/
HTH,
Scott
http://www.OdeToCode.com
On Sat, 11 Sep 2004 14:33:09 -0700, "Guadala Harry" <GMan@.NoSpam.com>
wrote:

>Looking for recommendations for *credible* information on implementing
>password hashing and salting. I did my own search and came up with a bunch
>of somewhat contradictory often "shooting-from-the-hip" and
>advertisement-laden pages... looking for something more academic with an
>objective treatment of the topic.
>Thanks!
>
[url]http://www.dotnetjunkies.com/Tutorial/77D4AFDC-585D-4539-A364-30028327FF14.dcik[/u
rl]
Greg
"Guadala Harry" <GMan@.NoSpam.com> wrote in message
news:ezDMqaEmEHA.712@.TK2MSFTNGP09.phx.gbl...
> Looking for recommendations for *credible* information on implementing
> password hashing and salting. I did my own search and came up with a bunch
> of somewhat contradictory often "shooting-from-the-hip" and
> advertisement-laden pages... looking for something more academic with an
> objective treatment of the topic.
> Thanks!
>
Building Secure ASP .NET Applications
http://www.microsoft.com/downloads/...8C-BF9C6593F25E
Eliyahu
"Guadala Harry" <GMan@.NoSpam.com> wrote in message
news:ezDMqaEmEHA.712@.TK2MSFTNGP09.phx.gbl...
> Looking for recommendations for *credible* information on implementing
> password hashing and salting. I did my own search and came up with a bunch
> of somewhat contradictory often "shooting-from-the-hip" and
> advertisement-laden pages... looking for something more academic with an
> objective treatment of the topic.
> Thanks!
>
Here's a couple good articles on hashing:
http://www.aspnetpro.com/Newsletter...o_l.asp

http://aspnet.4guysfromrolla.com/articles/103002-1.aspx
I hope this helps,
Steve C. Orr, MCSD, MVP
http://Steve.Orr.net
"Guadala Harry" <GMan@.NoSpam.com> wrote in message
news:ezDMqaEmEHA.712@.TK2MSFTNGP09.phx.gbl...
> Looking for recommendations for *credible* information on implementing
> password hashing and salting. I did my own search and came up with a bunch
> of somewhat contradictory often "shooting-from-the-hip" and
> advertisement-laden pages... looking for something more academic with an
> objective treatment of the topic.
> Thanks!
>