Password Hashing and Salting - Recommended Reading

[Guadala Harry]

Looking for recommendations for *credible* information on implementing
password hashing and salting. I did my own search and came up with a bunch
of somewhat contradictory often "shooting-from-the-hip" and
advertisement-laden pages... looking for something more academic with an
objective treatment of the topic.

Thanks!

 

[Scott Allen]

Keith Brown has a brief explanation here:
http://msdn.microsoft.com/msdnmag/issues/03/08/SecurityBriefs/

HTH,

 

[Greg Burns]

http://www.dotnetjunkies.com/Tutorial/77D4AFDC-585D-4539-A364-30028327FF14.dcik

Greg

 

[Eliyahu Goldin]

Building Secure ASP .NET Applications
http://www.microsoft.com/downloads/...FamilyID=055FF772-97FE-41B8-A58C-BF9C6593F25E

Eliyahu

 

[Steve C. Orr [MVP, MCSD]]

Here's a couple good articles on hashing:
http://www.aspnetpro.com/NewsletterArticle/2003/04/asp200304so_l/asp200304so_l.asp
http://aspnet.4guysfromrolla.com/articles/103002-1.aspx