why generatePasswordHash in security is very very slow?

ganjeali · January 24, 2015, 10:55am

I use this : Yii::$app->getSecurity()->generatePasswordHash($passwd);

abed_el_salam · January 24, 2015, 11:03am

It use encryption algorithm, I think that’s make it slow.

phtamas · January 24, 2015, 12:21pm

What do you exactly mean by "very very slow"? Password hashing is intentionally slow but, in normal circumstances, it should take less than one second.

ganjeali · January 25, 2015, 4:41am

Hello,

I think it is unusually slow.

It takes 1.26 seconds.(My cpu is Corei7-3537U and 8G of ram)

Is another hashing method slow like this?

rob006 · January 25, 2015, 1:51pm

That’s probably because you have low entropy on your machine, and it’s take a while to get random data to generate salt. It should work much faster on production server with high load.