4 ms·
No, because the static salt will be stored in the database alongside the passwords. The pepper would be compiled and live in the application layer. The value is
by willcipriano 6y ago
No, because the static salt will be stored in the database alongside the passwords. The pepper would be compiled and live in the application layer. The value is minimal but so is the cost.
- Sherl 6y agoIf it's static salt, it breaks the use of salt. Salt was designed such that a rainbow table cannot crack two similar passwords based on hash, exactly what a static salt would facilitate.