[majou]

Generating salt should be fine, no?

It's to thwart rainbow tables and ensure unique hashes for users with the same passphrase.