News for hackers. Stuff that matters.

A comment on Slack was hacked. Parent comment

Re:Slack was hacked by ufo on Friday March 27, 2015 @09:44PM (#9280128)
What is the problem? Does bcrypt truncate "salt+pepper"?
[ Parent | on HN ]
Re:Slack was hacked by iopq on Friday March 27, 2015 @11:11PM (#9280352)
Because the salt is in the hash!

$2a$12$GhvMmNVjRW29ulnudl.LbuAnUtN/LRfe1JsBm1Xu6LE3059z5Tr8m

$2a means it's using bcrypt version 2a

$12 means 12 rounds

GhvMmNVjRW29ulnudl.Lbu is the salt

AnUtN/LRfe1JsBm1Xu6LE3059z5Tr8m is the checksum

[ Parent | on HN ]