Timeline for Why do I need to add the original salt to each hash iteration of a password?
Current License: CC BY-SA 3.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Apr 13, 2017 at 12:48 | history | edited | CommunityBot |
replaced http://crypto.stackexchange.com/ with https://crypto.stackexchange.com/
|
|
| Jan 9, 2014 at 18:50 | comment | added | jcoop |
var hash = sha512(salt + password); for (i = 0; i < 1000; i++) { hash = sha512(password + hash); } <- Why is this not good?
|
|
| Jan 9, 2014 at 18:32 | comment | added | jcoop | So I understand why including the salt would not do anything beneficial but why wouldn't including the original password be beneficial? Seems that as I described above in my comments, this would ensure the only chance of collision is on the final iteration... You said most algorithms wouldn't include the salt or password in their hash iterations. What do they do instead? And why would would it be superior to using the password? | |
| Jan 9, 2014 at 1:50 | history | edited | Stephen Touset | CC BY-SA 3.0 |
added 46 characters in body
|
| Jan 9, 2014 at 1:42 | history | edited | Stephen Touset | CC BY-SA 3.0 |
added 46 characters in body
|
| Jan 9, 2014 at 1:35 | history | edited | Stephen Touset | CC BY-SA 3.0 |
added 2 characters in body
|
| Jan 9, 2014 at 1:30 | history | edited | Stephen Touset | CC BY-SA 3.0 |
added 594 characters in body
|
| Jan 9, 2014 at 1:24 | history | answered | Stephen Touset | CC BY-SA 3.0 |