[RAVE-410] Use bcrypt for password hashing

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.8-INCUBATING
• Assignee: Unassigned
• Reporter: marijan milicevic
• Created: 05/Jan/12 19:55
• Updated: 23/Feb/12 14:41
• Resolved: 20/Jan/12 17:42

Description

Current password hashing implementation is pretty much useless against brute force/dictionary attacks.

see:
https://jira.springsource.org/browse/SEC-1472
http://www.win.tue.nl/cccc/sha-1-challenge.html