Am I misunderstanding what a hash salt is?

后端 未结 5 1925
闹比i
闹比i 2020-12-31 09:42

I am working on adding hash digest generating functionality to our code base. I wanted to use a String as a hash salt so that a pre-known key/passphrase could be prepended

5条回答
  •  耶瑟儿~
    2020-12-31 10:12

    Its worth mentioning that even though the salt should be different for each password usage, your salt should in NO WAY be computed FROM the password itself! This sort of thing has the practical upshot of completely invalidating your security.

提交回复
热议问题