Learned about the Portable PHP password hashing framework today.
Portable PHP password hashing framework
Reply
Learned about the Portable PHP password hashing framework today.
I was looking for a good overview article that explained the process of password hashing and I found Password Encryption, Hashing, Salting Explained which was a pretty good run down.
On a related note I reread the Wikipedia page on HMAC.
Raz suggests adding a HMAC to our password hashing scheme.
If you want to allow root logins to your server, but want to disallow root logins with a password (leaving key logins enabled), then you can edit your /etc/ssh/sshd_config file and specify PermitRootLogin without-password.