|
Posted by Michael Fesser on 09/05/07 11:01
..oO(salonowiec)
>How will server know that it should translate my password "candy" to e.g.
>"Drt.Y/eF"? I'm encoding "candy" somewhere and the relation candy - Drt.Y/eF
>is not unique; if it were than it could be asily hacked. How is it?...
This is called a "salt". It's a little string (usually two chars), which
is used in the encryption, but also stored as plain text along with the
encrypted password.
<http://en.wikipedia.org/wiki/Salt_(cryptography)>
Micha
Navigation:
[Reply to this message]
|