|
|
|
|
|
by tokenizerrr
3661 days ago
|
|
> You can as long as it stays the same over time. Either lookup salt by username (requires an extra call back and forth) or use a single salt for the whole site, or actually you could have the salt deterministically depend on the username. All of those defeat hash tables. And here you just answered your initial point. > If the salt changes, you'd need to compute the password using multiple salts, which might have crypto guarantee issues when sent to the server. |
|