3 ms·
In your website's example, you have bcrypt(password, salt+pepper) Observe the difference between that and the rehash you just posted bcrypt(bcrypt(pa
by randunel 12y ago
In your website's example, you have
bcrypt(password, salt+pepper)
Observe the difference between that and the rehash you just posted
bcrypt(bcrypt(password, salt), pepper)
- deleted 12y ago[deleted]
- mbrubeck 12y ago> bcrypt(password, salt+pepper) I hope it's obvious that no one should never do this, since the output would contain the "salt+pepper" bits in cleartext alongside the hash, defeating the entire point of the "pepper": https://www.usenix.org/legacy/event/usenix99/provos/provos_html/node5.html https://www.usenix.org/legacy/event/usenix99/provos/provos_h... In fact, this is a perfect illustration of why it's bad to put secret bits into a crypto function in a place that's not designed to take secret bits. Bcrypt does not treat the salt parameter as a cryptographic secret, and other algorithms might not either. And they might leak it in more subtle ways.
- rmrfrmrf 12y agoOne would think it's obvious, yet this is what the person in the linked article suggests doing :/