Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

In a unsalted system, let's say your password is "hello" and my password is "hello." Your hash("hello") will be same as my hash("hello"). When I see your hash is same as mine, I know your password is "hello."

In a salted system, your hash("hello" + salt1) != my hash("hello" + salt2), and I have no way of guessing your password since the hashes are different.





Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: