3 ms·
If your salt is something like rkD'O:$|tW:kU}SPuuLZ/X(iwtQzVG" then you've kicked up the size of the necessary rainbow table exponentially, or forced them to co
by showerst 15y ago
If your salt is something like rkD'O:$|tW:kU}SPuuLZ/X(iwtQzVG" then you've kicked up the size of the necessary rainbow table exponentially, or forced them to compute a custom rainbow table for _just_ your salt.
It's still better to be using a slower hash function, but a good salt helps.
- antirez 15y agobtw it is important to stress that: 1) slow hash function. 2) per user random salt. 3) everything you want don't help if the password is "apple". So also you need: 4a) force users to passwords with required length / non alphanumerical chars, ... or 4b) relax the security requirements.