<?xml version="1.0"?>
<rss version="2.0">
  <channel>
    <title>PHPDeveloper.org</title>
    <link>http://www.phpdeveloper.org</link>
    <description>Up-to-the Minute PHP News, views and community</description>
    <language>en-us</language>
    <pubDate>Sun, 19 May 2013 07:15:17 -0500</pubDate>
    <ttl>30</ttl>
    <item>
      <title><![CDATA[ITNewb.com: Encrypting Passwords with PHP for Storage Using the RSA PBKDF2 Standard]]></title>
      <guid>http://www.phpdeveloper.org/news/13256</guid>
      <link>http://www.phpdeveloper.org/news/13256</link>
      <description><![CDATA[<p>
On the ITnewb.com site today there's <a href="http://www.itnewb.com/v/Encrypting-Passwords-with-PHP-for-Storage-Using-the-RSA-PBKDF2-Standard">a new tutorial</a> looking at the encryption of passwords in your PHP apps using the RSA PBKDF2 standard - a "Password-Based Key Derivation Function" that uses a pseudorandom function/input with a salt run multiple times to produce your derived key.
</p>
<blockquote>
When creating password hashes for storage, many programmers will run a password through MD5 once and call it a day, rendering those hashes very susceptible to attack if they're discovered. In this article, you'll learn how to create stronger hashes with PHP by using the RSA PBKDF2 Standard.
</blockquote>
<p>
They <a href="http://www.itnewb.com/v/Encrypting-Passwords-with-PHP-for-Storage-Using-the-RSA-PBKDF2-Standard">create a quick function</a> that takes in a few different values - the password to encrypt, a salt value, how many iterations to run, how long you want the derived key to be and which hash to use (in this case sha256). 
</p>]]></description>
      <pubDate>Mon, 21 Sep 2009 11:19:09 -0500</pubDate>
    </item>
  </channel>
</rss>
