hash(hash()) vs salted hash
问题 Since the introduction of Rainbow tables, and using only hashed passwords (e.x: MD5) to stored passwords in database is not the best secured way. When people talk about salted hashes, the always use it in this way hash(password . salt) or even hash(hash(password) . salt) . I don't know why to use salt, and add extra entry for each password to store the salt? Why don't we just use hash(hash(password)) , or even hash(hash(hash(password))) ? Is it more secure to put salt? or just the sense of