Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The point of the salt is not to add extra complexity to the secret information; it is to make your transformation of the password into a hash different from everyone else's such transformation. This prevents attackers from getting a supercomputer or two, calculating a mondo rainbow table, and using it to crack every password hash in existence. The salt forces them to perform this computational feat separately each time they want to crack a password.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: