4 ms·

If we use the global pepper for hashing, we can’t easily rotate it. I don't get this point. Why is it harder to rotate pepper for a hash compared to an encrypt

by OskarS 10y ago

If we use the global pepper for hashing, we can’t easily rotate it. I don't get this point. Why is it harder to rotate pepper for a hash compared to an encryption key?

Achshar 10y ago
You'd have to recalculate hashes for every user?
jxcl 10y ago
Because encryption can be decrypted with the correct key. A hash can't be reversed once you've hashed something with the pepper.
- OskarS 10y ago
  Hmm. Ok. That's true. Thanks!