Posted
by Kyle Heironimus
on Stack Overflow
See other posts from Stack Overflow
or by Kyle Heironimus
Published on 2008-10-28T21:18:41Z
Indexed on
2010/03/24
3:13 UTC
Read the original article
Hit count: 467
Is there a significance to the word "salt" for a password salt?
© Stack Overflow or respective owner
as seen on Stack Overflow
- Search for 'Stack Overflow'
Is there a significance to the word "salt" for a password salt?
>>> More
as seen on Stack Overflow
- Search for 'Stack Overflow'
Hey everyone,
Further to my question here, I have another question regarding salts.
When someone says "use a random salt" to pre/append to a password, does this mean:
Creating a static a 1 time randomly generated string of characters, or
Creating a string of characters that changes at random…
>>> More
as seen on Stack Overflow
- Search for 'Stack Overflow'
What's the best way to generate a cryptographically secure 32 bytes salt in PHP, without depending on libraries seldom included in typical PHP installations?
After some googling I discovered that mt_rand is not considered secure enough, but I haven't found a suggestion for a replacement. One article…
>>> More
as seen on Stack Overflow
- Search for 'Stack Overflow'
I've read through many of the questions on SO about this, but many answers contradict each other or I don't understand.
You should always store a password as a hash, never as plain text.
But should you store the salt (unique for each user) next to the hashed password+salt in the database. This doesn't…
>>> More
as seen on Stack Overflow
- Search for 'Stack Overflow'
what is "salt", also what is "rainbow table".
>>> More
as seen on Ask Ubuntu
- Search for 'Ask Ubuntu'
I recently upgraded an ubuntu server with many users to a recent version from a version from 2008. The server used to use md5 password hashes (e.g., the shadow passwords began with $1$) and now is configured to use sha512.
I'd prefer to keep using sha512, but would like the old users to be able…
>>> More
as seen on Super User
- Search for 'Super User'
Whenever I need new passwords I use some tools to generate those, preferable memorable passwords, but I've been wondering how secure this might actually be.
Using The xkcd random number generator is probably pretty bad, cat /dev/random is probably pretty good, but generating memorable passwords seems…
>>> More
as seen on Geeks with Blogs
- Search for 'Geeks with Blogs'
There has been much news about the hack of the Gawker web sites. There has even been an analysis of the common passwords found.
This list is embarrassing in many ways. The most common password was "123456". The second most common password was "password".
Much has also been written providing…
>>> More
as seen on Internet.com
- Search for 'Internet.com'
The microblogging site has reset some Twitter users' passwords after a phishing attack attempted to steal their login information.
>>> More
as seen on Internet.com
- Search for 'Internet.com'
The microblogging site has reset some Twitter users' passwords after a phishing attack attempted to steal their login information.
>>> More
