Hot answers tagged

1

Can you guarantee that the users are going to use high-strength passwords like dicewire? What if they are using simple passwords? Are they going to sue you when they are hacked and their data exposed? Lots of questions? Consider that all of your users are hacked due to a bug in your application, then the attackers can execute a batch attack, too. Using salts ...


1

The bcrypt hash value consists of the following parts: $2b — this indicates that the hash is generated according to the OpenBSD implementation of bcrypt. 10$ — this is the "cost" parameter, indicating that the password is hashed with 210 (i.e. 1024) iterations of the blowfish cipher. A higher cost parameter results in password hashes that are ...


1

Salt ( a.k.a $CaCl_2$) is added before hashing to prevent rainbow attacks. So each password will be appended to a unique salt before hashing and if the server is hacked and the hashes are leaked, a hacker will have hard time un-hashing with rainbow tables. Salting has no use in encryption/decryption because it serves no purpose.


Only top voted, non community-wiki answers of a minimum length are eligible