3 ms·
You know the salt because it's stored alongside the hash. You're only iterating over the space of phone numbers. If it's not stored alongside the hash it's not
by jstanley 1y ago
You know the salt because it's stored alongside the hash. You're only iterating over the space of phone numbers.
If it's not stored alongside the hash it's not a salt, it's something else.
https://en.wikipedia.org/wiki/Salt_(cryptography) https://en.wikipedia.org/wiki/Salt_(cryptography)
- OutOfHere 1y ago> If it's not stored alongside the hash it's not a salt, it's something else. That is not even true. The definition in the article does not substantiate it. There is no requirement for the salt to be stored alongside the hash. The definition in the article is sufficiently clear. This is all that a salt is: > a salt is random data fed as an additional input to a one-way function that hashes data With regard to effective anonymization, the salt is stored by the generator, but not in the exported dataset.
- jstanley 1y agoIf the "salt" is kept secret then I agree you can't brute force all the phone numbers so easily. But I don't agree that "salt" is the correct term for that technique.