3 ms·
+1 to prodigal_erik Also concatenating "foo" to the end of /every/ password is not salting your hash. You need to have a suitably random string for it be consi
by timtadh 16y ago
+1 to prodigal_erik
Also concatenating "foo" to the end of /every/ password is not salting your hash. You need to have a suitably random string for it be considered salt. Also you want to have a different random string for every password in your database.
[+1 to tptacek for constantly saying don't write crypto code :-p]
- photon_off 16y agoI should have noted that "foo" wasn't meant to be taken literally; clearly it should be something that wouldn't show up in a dictionary. Even so, the point was that any salt is substantially better than none, and is easy to implement.