2
$\begingroup$

Should you hash the salt on its own ? Is that possible?

for example being password with salt appended at the end hash(pass || salt) and hash(salt) in a password file?

$\endgroup$

1 Answer 1

2
$\begingroup$

Salt should remain in the plain form. There are 2 reasons for this:

  • Salt is not secret. If the attacker knows salt, it will not give any advantage. The purpose of salt is to prevent usage of rainbow tables. If every password hash uses different salt, then rainbow table makes no sense.
  • To check if a password candidate is correct, we need to repeat exactly the same hashing steps as for the correct password. Means, we need salt in the plain form.
$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.