Question regarding passwords + security. My current config:
$config['hash_method'] = 'bcrypt';
$config['default_rounds'] = 8;
$config['random_rounds'] = true;
$config['min_rounds'] = 5;
$config['max_rounds'] = 9;Generates passwords like this:
$2a$08$pMmzIomXsmPhl8CfXDx7ZebKxTID2We5Sr3tgBNkIw81vJSQfqll.
$2a$09$tH2Z3gbGrhHaP8VDdD6bD.a5QEzfMxA41BrAsSmQtjkd8YWRqF9Sm
$2a$07$v0tBBmGO5Ym/AH4mjXikpeMdkHxi2C.W2FKcdP2Xxj12JWPRQ3z3W
So is the $2a$08 saying that it is bcrypt - and to run 8 rounds on it? And $2a$09 is saying run 9 rounds?