Tagged Questions
2
votes
2answers
190 views
Hashing passwords with a salt - why use different salt for everyone?
Given a database where we have usernames and passwords, we want to secure users' passwords by hashing them. We should not use only username and passwords in this hash, as someone having data from ...
8
votes
2answers
362 views
Do I have to have a different salt for each password?
Should I use a different salt for each password?
In my system, there are no user names, only passwords. When a user logins in, he types in one or more passwords and the server compares the results ...
3
votes
2answers
403 views
How did LinkedIn “salt” all their passwords?
First, just to make sure I understand "salting" correctly:
You randomly generate a string to append to the password before hashing it, so as to increase its length and make precomputed tables much ...
3
votes
1answer
231 views
What's the reason for applying the hash twice when hashing with salt?
One of the typical approaches to computing a salted hash is this:
hash(salt+hash(secret))
where hash is something like SHA-256 hash function - taking any size ...
1
vote
2answers
284 views
Passwords with same SALT. What does this mean?
If the same SALT is used for many passwords on a Linux server, in what way is that a security risk?
Does the mean, that a user (which can change his own password) can calculate other users passwords?
...
3
votes
3answers
1k views
Simple/beginner level explanation of salt
I'm a beginner to cryptography and looking to understand in very simple terms what salt is, when I might need to use it and why I should/should not use it. Can anyone offer me a very simple and clear ...
5
votes
2answers
1k views
Use of salt to hash a password
In a few implementations of hashed passwords, I have seen that the length of the random salt is chosen to be, say, 10 or "some constant". Is there any specific reason why the salt is chosen to have a ...
5
votes
5answers
237 views
In storing passwords in a database should I use a per-application salt in addition to a per-secret salt?
Assuming that the salts are sufficiently long (16 random chars) is there any advantage in using a per-application salt in addition to a per-secret salt when storing hashed passwords in a database?
...
