Is it okay to store salts with hashes?

前端 未结 7 861

My understanding is that a salt is not intended to be secret, it is merely intended to be different from any centralized standard so that you can\'t develop a rainbow table or s

7条回答
  •  伪装坚强ぢ
    2021-02-01 19:13

    You actually already have a salt value stored in the user table: the pkey of the table.

    You don't have to invent a new column for storing the salt. Just use the pkey. This idea of course presumes that you do have a pkey associated with a user name. e.g. the user name is not the pkey in the table.

    This is a near dup wtb: Password hashing, salt and storage of hashed values

提交回复
热议问题