Ask HN: What is the latest on treatment of Metastatic Breast Cancer?

I'm evaluating Rust password hashing functions, specifically Argon2, scrypt, PBKDF2. I'm using the RustCrypto open source implementations. I have three simple demos in case you want to try these yourself:

* https://github.com/joelparkerhenderson/demo-rust-argon2

* https://github.com/joelparkerhenderson/demo-rust-scrypt

* https://github.com/joelparkerhenderson/demo-rust-pbkdf2

I'm seeking advice please, such as pros and cons. The context is medical software where hashing is on generally modern machines. I'm aware of the OWASP recommendations which seem broadly helpful. Thanks!

Comments (1)

stop50 · 17h ago

The first two are good enough, but shouldn't be the only protection. In general salts (adding an per password random string to the raw password) and pepper(addding an random string that is shared across the application) should be added.

Pbkdf2 is quite old and has an attack vector from ASICs and FPGA, but is still quite widespread for applications and protocols.

Ask HN: What is the latest on treatment of Metastatic Breast Cancer?

Ask HN: What cool skill or project interests you, but feels out of reach?

Tell HN: Help restore the tax deduction for software dev in the US (Section 174)

Ask HN: Any Way to Sidestep Stripe's "alternate currency payout fee"

How to get started with writing tech video essays

Ask HN: Would You Use a Declarative Back End (APIs, DB, Auth, Sync)?

Ask HN: How to learn CUDA to professional level

Ask HN: Startup getting spammed with PayPal disputes, what should we do?

Ask HN: Does Google train on Google Docs?

Ask HN: In 15 years, what will a gas station visit look like?

Data manipulation using natural language prompts

Rust password hashing functions: Argon2, scrypt, PBKDF2

Heroku Outage from AWS CloudFront Issue?

Building an Audit Readiness Platform for Startups – Would Love Your Feedback

Ask HN: Has anybody built search on top of Anna's Archive?

Control PC games with body movements using webcam andPython+ MediaPipe

Ask HN: Any good tools for viewing congressional bills?

Ask HN: What API or software are people using for transcription?

List of Countries Without a Value-Added Tax

Ask HN: Do founders get honest feedback on their pitch decks?

Ask HN: What Happened to the Apple Vision Pro?

Ask HN: What's your open source stack?

Ask HN: What are some of the best books to learn signal processing?

Ask HN: Is there any demand for Personal CV/Resume website?

Ask HN: Options for One-Handed Typing

Ask HN: How do you integrate AI assistants into your note taking?

Best place for small remote gigs?

Bill Atkinson has passed away

Ask HN: I'm considering open-sourcing my UI library – how to generate income?

Ask HN: Anyone else feeling increasingly alienated from the industry?

Ask HN: What would you work on if you couldn't fail?

Ask HN: Share you personal favorite productivity tools, workflows or setup

Ask HN: How long do you ever leave your server running without updates?

Heroku login down for 7 hours

Ask HN: What Does Your Self-Hosted LLM Stack Look Like in 2025?

Ask HN: Running AI agents in isolated environments

What is a modern successor to HyperCard?

When Profit Overshadows Community: A Look at Golang Conferences

Get Your Dev Tool Mentioned by ChatGPT, Gemini Not Just Ranked on Google

Ask HN: Wrongly banned from Facebook Marketplace – can anyone help at all?:/

Ask HN: Share real complaints about outsourcing data annotation

Ask HN: Is anyone still programming the old-fashioned way (without LLMs)?

Reaching my first 100 users without money or audience (at 10K users now)

Ask HN: What do you put in claude.md and what you leave out?

Ask HN: Best practices for building front ends with AI assistance?

Rust password hashing functions: Argon2, scrypt, PBKDF2

Comments (1)