Hacker News new | ask | show | jobs
by jaxbot 4589 days ago
On the bright side, he/she's using bcrypt.
1 comments

No salt.. It's sad that we now have to salute something like that after the Adpbe breach. Decent hashing and salting should be something standard, normal, not worthy of praise.
Bcrypt eliminates the need for multiple columns and is very secure so this person is doing it right. Actually I get a little bit ancy when people still aren't using Bcrypt.
the bcrypt format is $2a$<rounds>$<salt><hash>

the salt is 22 chars, the hash 31 chars.