Hacker News new | ask | show | jobs
by gxti 5659 days ago
You can upgrade passwords when the user logs in. The sanest thing to do seems to be to store all the public variables (work factor, salt) alongside the digest so each password can be handled separately.