Hacker News new | ask | show | jobs
by extra88 4597 days ago
> scrypt/bcrypt do the right thing, regardless, and generate unique password hash for the same plaintext

I found this statement confusing so I looked a PHP's documentation. http://php.net/manual/en/function.password-hash.php

Bcrypt does use a salt to create unique hashes for the same plaintext, it's just that the function is written so that a random salt is created and stored for you, you don't have to provide a salt along with the plaintext.

Other implementations may not work quite this way.