security algorithms for refactoring.

security_algorithms.md

##Requirement for HMAC secret key

• http://security.stackexchange.com/questions/95972/what-are-requirements-for-hmac-secret-key

HTTPS GET request query param is secured?

• http://stackoverflow.com/questions/323200/is-an-https-query-string-secure

Use JWT as CSRF token?

• http://security.stackexchange.com/questions/115766/is-a-jwt-usable-as-a-csrf-token

Password Hashing

• http://www.codeproject.com/Articles/704865/Salted-Password-Hashing-Doing-it-Right
• https://paragonie.com/blog/2016/02/how-safely-store-password-in-2016
• http://security.stackexchange.com/questions/4789/most-secure-password-hash-algorithms
• https://hynek.me/articles/storing-passwords/

API access token

• http://developer.securekey.com/securing-api-access-tokens/
• https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)_Prevention_Cheat_Sheet#Viewstate_.28ASP.NET.29
• https://nvisium.com/blog/2014/09/10/understanding-protectfromforgery/

CSRF request

• https://nvisium.com/blog/2014/09/10/understanding-protectfromforgery/