4 ms·
I have zero problem with storing the salt alongside the hashed password, because in practice, it doesn't make anything less secure. Great, now please go and fi
by dchest 14y ago
I have zero problem with storing the salt alongside the hashed password, because in practice, it doesn't make anything less secure.
Great, now please go and fix your software to use slow password hashing function!
- richardv 14y agoYou quoted me totally out of context (I don't use SHA and you are implying that I do. I didn't spot that in your original paste snippet, and clearly wrongly assumed that you were just referring to the concatenation of hash to salt.) Nothing that I said was wrong (in fact it's sound advice), so I'm a little shocked at the massive downvotes, your blunt response, followed up with the patronising advice to rewrite all my software. (And no, I don't use SHA. I didn't spot that in your snippet.)