Posted by Michael Fesser on 09/05/07 11:01

..oO(salonowiec)

>How will server know that it should translate my password "candy" to e.g.
>"Drt.Y/eF"? I'm encoding "candy" somewhere and the relation candy - Drt.Y/eF
>is not unique; if it were than it could be asily hacked. How is it?...

This is called a "salt". It's a little string (usually two chars), which
is used in the encryption, but also stored as plain text along with the
encrypted password.

<http://en.wikipedia.org/wiki/Salt_(cryptography)>

Micha

[Back to original message]