Web Security Thread

ITT we discuss web security.

>>61

so you need a separate password for OS and/or for disk encryption

OS/Disk encryption does not provide authentication - that will not protect you from software nor hardware keyloggers. This is one more reason why we should move to pk crypto.

but why not use sha3 with them?

Performance or compatibility reasons? I would not know, I use PBKDF2 with 2^16 rounds + SHAKE256 for mine.