PolyPasswordHasher: Protecting Passwords In The Event Of A Password File Disclosure

This paper presents PolyPasswordHasher, a software-only, server-side password storage mechanism that requires minimal additional work for the server, but exponentially increases the attacker’s effort.