www.zlavomat.sk password storage disclosures

Slevomat.cz, s.r.o.

Rating A

Argon2 (since February 2018, disclosed February 2018)

Params: variant=Argon2i

Full algorithm: AES-256(Argon2(password))

Disclosures:

bcrypt (since May 2014, disclosed December 2016)

Params: cost=10

Full algorithm: AES-256-CBC(bcrypt(password))

Disclosures:

SHA-1 (disclosed June 2014)

Disclosures:

Site uses a slow hashing function, this is disclosed "on-site", in the docs, FAQ, etc.