4 ms·
What if a site uses 128-bit salts generated by a good (perhaps hardware-based) RNG?
by csense 13y ago
What if a site uses 128-bit salts generated by a good (perhaps hardware-based) RNG?
- mikegioia 13y agoThat will remove pre-computed rainbow tables from the equation.
- iuguy 13y agoOnly really for the time being (and a considerable time to come, Quantum and Biological computing enhancements notwithstanding) but for a salt that big it makes far much more sense to use a key derivation function as you're effectively generating two keys otherwise (one user generated, the other - salt - via PRNG).