3 ms·
Yes absolutely this - I was just trying to explain how salts should implemented - in the real world always use something like bcrypt or scrypt that does all thi
by jfindley 10y ago
Yes absolutely this - I was just trying to explain how salts should implemented - in the real world always use something like bcrypt or scrypt that does all this for you.
- tim333 10y agoOK, I think I got my terminology wrong. But my thinking was that as well as using bcrypt or whatever on the info in the database you can add some random value stored in code rather than in the database so if your database is compromised it's still a job for them to crack it. Not quite sure what you call that.
- heinrich5991 10y agoA pepper. https://en.wikipedia.org/wiki/Pepper_%28cryptography%29 https://en.wikipedia.org/wiki/Pepper_%28cryptography%29