Do I need a “random salt” once per password or only once per database?

前端 未结 4 737
孤独总比滥情好
孤独总比滥情好 2020-12-02 05:58

Further to my previous question about salted passwords in PHP/MySQL, I have another question regarding salts.

When someone says \"use a random salt\" to pre/append t

4条回答
  •  一生所求
    2020-12-02 06:34

    The second alternative is the correct one.

    Traditionally, the salt is stored alongside with the hashed password, but non encrypted (typically preappended, for example in unix passwords)

    Update: the method used in most newer Unix system is this one.

提交回复
热议问题