You are. The salt is just to stop the use of rainbow tables, which are pre-generated maps between plaintext passwords and their hashes. Anyway, you want to sto

You are. The salt is just to stop the use of rainbow tables, which are pre-generated maps between plaintext passwords and their hashes. Anyway, you want to store a new salt (not just a system-wide 'this is my salt' salt) for each stored password anyway, so you will need to store that data somewhere. You could obfuscate a little by storing the salts elsewhere, but it seems a little extreme.