Password Hashing in PHP
Channel: Anthony Ferrara
Date: 2012-10-09

An unconference talk that I gave at the PHP North West 2012 conference.

It explores the ways that password hashes are attacked, and how those attacks can be prevented. It also goes into some tools that are available to properly hash passwords for storage in PHP. We introduce the new Password Hashing API that will be available in PHP 5.5...

Slides: http://ircmaxell.github.com/password-hashing-mini-presentation/

References:
PHP 5.5 Password Hashing: https://wiki.php.net/rfc/password_hash
Password Compat: https://github.com/ircmaxell/password_compat
PasswordLib: https://github.com/ircmaxell/PHP-PasswordLib
PHPASS: http://www.openwall.com/phpass/

Tools:
John The Ripper: http://www.openwall.com/john/
HashCat: http://hashcat.net/