News for hackers. Stuff that matters.

A comment on Peppering (Password Storage). Parent comment

Re:Peppering (Password Storage) by willcipriano on Thursday July 02, 2020 @07:12AM (#23711978)
No, because the static salt will be stored in the database alongside the passwords. The pepper would be compiled and live in the application layer. The value is minimal but so is the cost.
[ Parent | on HN ]
Re:Peppering (Password Storage) by Sherl on Thursday July 02, 2020 @08:23PM (#23719643)
If it's static salt, it breaks the use of salt. Salt was designed such that a rainbow table cannot crack two similar passwords based on hash, exactly what a static salt would facilitate.
[ Parent | on HN ]