Engineering
March 17, 2026
The 946-Millisecond Tax: Migrating API Key Auth from Bcrypt to HMAC-SHA256
How we replaced bcrypt API key verification with HMAC-SHA256 and an in-memory cache, cutting authentication overhead from 946ms to under 10ms, eliminating database queries on the hot path, and survivi...
Read more →