3 ms·
I have wondered the same thing. Make it a piece of data that comes in from the environment or a secrets manager. It’s not bulletproof, but if done correctly see
by mberning 6y ago
I have wondered the same thing. Make it a piece of data that comes in from the environment or a secrets manager. It’s not bulletproof, but if done correctly seems like it makes the whole hashing scheme a little better.
- lookingfj 6y agoIf you are doing this isn't it pretty much the same as encrypting it with a key?
- liambuchanan 6y agoencryption is non-deterministic
- iso8859-1 6y agoif that was true, this article wouldn't exist: https://en.wikipedia.org/wiki/Deterministic_encryption https://en.wikipedia.org/wiki/Deterministic_encryption
- quesera 6y agoSome encryption algorithms are (effectively, but not literally) non-deterministic, e.g.: DUKPT, RSA-OAEP Most encryption algorithms are deterministic, and most password authentication schemes depend on that fact.
- srtjstjsj 6y agoPasswords aren't encrypted, so why would deterministic encryption matter?
- quesera 6y agoErr, yes, good point. And if I had read the article first, I would have had the proper context of technical specificity loaded before commenting. Nevertheless, most encryption algorithms are deterministic. :)