Timeline for Would this be considered a secure password hash?
Current License: CC BY-SA 4.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 1, 2022 at 13:55 | comment | added | kelalaka | Salt kills the rainbow tables. That's obvious. However, the security of the password hashing is not based on the secrecy of the salt. | |
| Feb 1, 2022 at 13:40 | comment | added | kelalaka | We consider that the salt is public. For a brute force attackers it only prevents the rainbow tables and they will search only the password not the password and the salt. An attacker to the system will get the salt and the hash. They are usually stored in a string. Therefore only the strength of the password and password hashing mechanisms are important. | |
| S Feb 1, 2022 at 13:17 | review | First answers | |||
| Feb 1, 2022 at 13:41 | |||||
| S Feb 1, 2022 at 13:17 | history | answered | U. Windl | CC BY-SA 4.0 |