Are salts useless for security if the attacker knows them?

后端 未结 7 1563
误落风尘
误落风尘 2021-02-14 11:14

Let\'s say I have a table of users set up like this:

CREATE TABLE `users` (
    `id` INTEGER PRIMARY KEY,
    `name` TEXT,
    `hashed_password` TEXT,
    `salt`         


        
相关标签:
7条回答
  • 2021-02-14 11:47

    If an attacker knows the salt, the hashed password and the hash algorithm, then they can mount a brute-force dictionary attack (or rainbow attack).

    0 讨论(0)
提交回复
热议问题