4 ms·
So the salt was just added to the hash without hashing the concatenated hash + salt, i.e was this the method they chose?: saltedhash(password)=hash(password).sa
by wolfhumble 16y ago
So the salt was just added to the hash without hashing the concatenated hash + salt, i.e was this the method they chose?:
saltedhash(password)=hash(password).salt
A part from the obvious flaw of including part of the password in plain text, how secure is this method compared to the following method were the salt is not a secret and were the concatenated hash + salt is hashed?:
saltedhash(password)=hash(hash(password).salt)