4 ms·
From your response it seems to me like you didn't read the article. The point of the article is to add a nonce to the standard salt+password scheme so that if y
by kwantam 15y ago
From your response it seems to me like you didn't read the article. The point of the article is to add a nonce to the standard salt+password scheme so that if you get the salt+password table, you still don't have enough info to brute force the password.
It's not that salt is bad so much as that it's insufficient. It's useful to keep straight up rainbow tables from working and to be sure that two users with the same password don't end up with the same value in the password table.