4 ms·
Best practice when storing passwords is to hash them, then compare the hash of the user input to the stored hash. If a user can compute all the possible input->
by alanctgardner2 14y ago
Best practice when storing passwords is to hash them, then compare the hash of the user input to the stored hash. If a user can compute all the possible input->hash mappings for a given set of parameters (salt, etc.) they can figure out the password from the hash.
- zdw 14y agoWhat the article is about is hash collisions - two different pieces of data with the same hash value, not using a hash to obtain the original data. That's what I'm wonder at the value for. Otherwise your're totally accurate.