3 ms·
The server would need to hold the unsalted hash then. And if those leak, everything you need to calculate the client salt is right there.
by 0x0 6y ago
The server would need to hold the unsalted hash then. And if those leak, everything you need to calculate the client salt is right there.
- labawi 6y agoThe server should hold the unhashed salt, as is standard. One for client, one for server.