https://tools.ietf.org/html/rfc2898

密码保护：

• scrypt
• https://www.tarsnap.com/scrypt.html
• https://www.tarsnap.com/scrypt/scrypt.pdf
• https://scrypt.googlecode.com
• bcrypt
• http://en.wikipedia.org/wiki/Bcrypt
• http://bcrypt.sourceforge.net/
• PBKDF2
• http://en.wikipedia.org/wiki/PBKDF2
• http://anandam.name/pbkdf2/

• Password Storage Cheat Sheet - https://www.owasp.org/index.php/Password_Storage_Cheat_Sheet
• Secure Password Storage - http://goo.gl/Spvzs

https://www.pwdhash.com/

https://howsecureismypassword.net/ - 测试密码强度

常用弱密码

• http://news.rednet.cn/c/2011/11/23/2439538.htm
• http://www.guokr.com/post/81254/
• http://blog.trendmicro.com/new-infographic-top-30-most-popular-passwords-stolen-from-linkedin/
• http://tech2ipo.com/63142