I have a question about the way to store a key or password that was used for encryption, so that the application can check if the user put in the right key for decryption. If I make a mistake, please advise me and I will try to avoid such a mistake in the future.
Normally, the key that was used for encryption is stored hashed on the system, so that the application can check if the user used the correct key.
Would it be better to store not the whole key hashed, but split the key into several parts and hash each of these parts? This should make cracking more difficult, because the attacker has to crack several hashes, with different salts (if used). Am I totally wrong with my line of thought?
If yes a little hint would be nice, so that I can investigate in that direction and avoid this mistake in future.