4 ms·
> no mention of usage of salts They wrote "MyHeritage does not store user passwords, but rather a one-way hash of each password, in which the hash key differs
by magnat 8y ago
> no mention of usage of salts
They wrote "MyHeritage does not store user passwords, but rather a one-way hash of each password, in which the hash key differs for each customer". I believe "different hash key for each customer" means either nonce or salt.
- solatic 8y agoIt's ambiguous, I read it as the hashes being different for each customer out of a mistaken assumption that no two customers have the same password. A salt isn't really a "key" for a hash function, because it isn't going to tell you by itself what the original unhashed value is, and neither will it by itself give you the final hash.
- KMag 8y agoBut a salt is a key in the same sense as a MAC key (such as HMAC key).