3 ms·
Yes, they usually produce a string that looks something like "salt||hash". (Salt is a non-secret value.) This result of bcrypt: $2a$10$N9qo8uLOickgx2ZMRZoM
by dchest 10y ago
Yes, they usually produce a string that looks something like "salt||hash". (Salt is a non-secret value.)
This result of bcrypt:
$2a$10$N9qo8uLOickgx2ZMRZoMyeIjZAgcfl7p92ldGxad68LJZdL17lhWy
|/ \| \____________________/\_____________________________/
| | salt hash
| cost
|
algorithm,
version
You store this string in the database.
- zo1 10y agoThe big thing about this, is that it is perfectly "OK" to store both the algorithm, cost, and salt alongside the hash. Most people seem to think, and myself included when I was new-to-it, that storing all those things together would compromise the security. The point of the hash is that it is impossible (almost) to get to the hash without the user's password, and there is no way to get to the password with the entire string you posted.
- DigitalJack 10y agoI'm naive about these things, but I was under the impression that salt just thwarted pre-computed hash tables? I guess should be "just" in quotes. So somebody with resources and motive could still brute-force that string. It seems that storing the salt somewhere else would add a comparable amount of security as the salt itself. It seems prudent along the lines of "don't put all your eggs in one basket."
- CiPHPerCoder 10y agoWhat you're thinking of is called a "pepper" and is discouraged.
- raverbashing 10y ago> but I was under the impression that salt just thwarted pre-computed hash tables? Yes. Because if you had two users with the password 'dadada' they would hash to the same value Now 1234:dadada hashes differently then 1326:dadada hence preventing the use of a prehashed table (you could go through all salts for common passwords, but it's usually a bit long as well)