2 ms·
You'd still need the salt though, right?
by imdsm 10y ago
You'd still need the salt though, right?
- 15155 10y agoBcrypt salts are ordinarily colocated with the hashes and the number of rounds used to compute them.
- valleyer 10y agoThe salt is typically stored with the hashed value. Its purpose is simply to prevent you from being able to use a single dictionary attack on all users.
- andruby 10y agoThe salt is usually stored with the hash. It prevents using pre-calculated rainbow tables. Without a salt you can check a password guess against all passwords. With a salt you can only test the guess against a single password.