3 ms·
> scrypt/bcrypt do the right thing, regardless, and generate unique password hash for the same plaintext I found this statement confusing so I looked a PHP's d
by extra88 13y ago
> scrypt/bcrypt do the right thing, regardless, and generate unique password hash for the same plaintext
I found this statement confusing so I looked a PHP's documentation.
http://php.net/manual/en/function.password-hash.php http://php.net/manual/en/function.password-hash.php
Bcrypt does use a salt to create unique hashes for the same plaintext, it's just that the function is written so that a random salt is created and stored for you, you don't have to provide a salt along with the plaintext.
Other implementations may not work quite this way.