Hacker News new | ask | show | jobs
by manmal 5262 days ago
What do you mean by "the salt is secure"? Hidden in code files vs. stored next to the hashed password?
1 comments

I apologize if my question was unclear; that's almost certainly because of a lack of expertise on my side.

On one end of the spectrum, I envision the same salt used for every user, allowing for the easy and effective creation of rainbow tables. On the other end, I envision unique salts with many bits of entropy for each user, making rainbow tables technologically infeasible.