3 ms·
Salts can mitigate brute-force attacks in the specific case that the salt is stored separately from the hash (and only one is leaked).
by TheLoneWolfling 12y ago
Salts can mitigate brute-force attacks in the specific case that the salt is stored separately from the hash (and only one is leaked).
- tptacek 12y agoThe job of a password hash is to strengthen weak secrets in compromised databases. Your suggestion defines the problem away: "never lose the whole database", it suggests, "and you don't have a problem".
- wglb 12y agoInsofar as I have seen, the salt is stored right next to the hash, so how do you get one and not the other?