Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If an attacker gets access to a database of user names/hashes, a salt prevents him from simply checking the hashes against a precomputed list because each hash is totally unique.

The attacker would have to recompute all hashes for each user using their individual salt.

At least that's what I remember from Computer Security ha



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: