[cauterized]

But then if the salt is stored and the algorithm is known, doesn't the salt just essentially become the password, from a security standpoint?