Hacker News new | ask | show | jobs
by jefftk 1212 days ago
EDIT: I misread the linked post, ignore me!

<strike>crypt is the hashing function, not the password checking function</strike>

1 comments

I assume s/bit/not/. The checking function is “does the given password with the stored parameters hash to the same value as the stored hash”. Hash functions are deterministic.

So returning the original hash for a valid password is the success case.