Cryptography function that takes random bits and a string (typically a password) and uses a one-way hash to provide a new string that can be used for authentication without providing access to the original string. If a salt function uses enough random bits, the resulting string is generally considered cryptographically secure.
Questions tagged [salt]
1027 questions
-1
votes
2 answers
Making My PHP Site Hack Resistant
I'm making a custom CMS for a website I've been planning and security is a big concern.
I probably lack the expertise to fend off a full scale hacker social engineering his way into the server room but this is a list of what I've compiled from here…
ert3
- 114
- 11
-1
votes
1 answer
Storing characters like % and \ in MySQL fields?
I have a function to generate an 11 character salt. This salt can include characters like % which I know is wildcard in SQL and \ which is used for escaping things. Some users are complaining about not being able to log in. Could these characters…
Steve
- 2,936
- 5
- 27
- 38
-1
votes
3 answers
PHP SECURITY dynamic generated user hash password on every login or hash system changes
I'm knowing this site http://www.openwall.com/phpass/, but idea is on salt on mainly system.
Example, ZEND use system('uname -a') and it's hashed to md5() for using ROW LEVEL user SALT encryption. This is combination of user password, user login…
user1445414
- 1
- 1
-2
votes
1 answer
How to saving salt
maybe, in the signup process,
( I using express.js, MySQL, Sequelize )
get ID and PW at Front-end
saving ID in DB
hashing the pw with salt
save hashed pw in DB
And,,,
can I use salt used before?
when some user log-in this server,
their PW will be…
crzstarcoder
- 11
- 4
-2
votes
1 answer
In PHP/ Mysql, how to access encrypted data in database after changing the salt value stored in a config file?
Currently I'm encrypting user sensitive data before storing it in the database:
// salt retrieved from config file
$salt = 'a1b915580757c17c38a986faab21493d';
$sql = "insert into `appointments` (`id`, `appointment_date`,…
Durian Nangka
- 257
- 4
- 17
-2
votes
1 answer
Cracking a salted hash using a dictionary in python
im currently attempting a question where i have to crack a salted hash in python given the hash e77decd0e7c8a7b4688b010241bece45 and the salt "$goodluck$". I have tried downloading 10 million of the most popular passwords…
BarTM
- 57
- 7
-2
votes
1 answer
How password hash and salt stored in Symfony database?
I am migrating a project from Symfony to Django. I need to import all users with passwords.
To do this I need to know how passwords are stored in the database. For each user password I need to know 4 things:
the algorithm was used to generate…
epquick
- 29
- 6
-2
votes
1 answer
How to hash and salt passwords for mysql database
I've seen a lot of topics about hashing and salting a password and then comparing them with the hash and salt in a MySQL database, however none of them really helped.
They were either really 'vague' or not in the right coding language.
I am coding…
Blooberz
- 1
- 1
-2
votes
2 answers
erro when running this code, looking up did nothing
I am having great problem fixing this issue here and i am not very familiar with php. I don't see any problem missing in the code. I have searched and spent a really long time on this. However, it just keeps changing from one to another issue. the…
johndue
- 9
- 1
-2
votes
1 answer
SALT Hash Passwords in Visual Studio
I know there are many questions on SALT and hashing passwords, but I have yet to find a tutorial to walk me through this in VS using the MVC pattern.
I currently have a DB created with a user table containing three columns:
userID(PK, int, not…
comfycozy
- 141
- 2
- 3
- 14
-2
votes
1 answer
Method throws exception that java says isn't handled
When I try to run this code in my Main class my IDE pops up and says that I'm not handling the exception I'm throwing at the beginning of my method.
public byte[] generateSalt() throws NoSuchAlgorithmException{
// VERY important to use…
Alex Day
- 39
- 1
- 7
-2
votes
3 answers
I don't know how to use salt
this is my register code:
user2870245
- 1
- 3
-2
votes
2 answers
Using php hash random salt, store salt on temporary user table?
I'm creating an login system in php. I have a custom table for e-mail check, which gets the user register data, and then move it to the table user.
I would like to know if it's safe to create the random salt and store it with hashed password on…
Renato Probst
- 5,914
- 2
- 42
- 45
-2
votes
1 answer
Looking for a obj-c equivalent of this openSSL command
I am looking for obj-c code that is equivalent to this command
openssl enc -aes-128-cbc -k secret -P -md sha1
Once you type the above in command you get this output
salt=538C5F5ECAB7BFA2
key=43EB4C7D68263389D069381E48B6E0F3
iv…
Anand
- 5
- 2
-2
votes
1 answer
What would be the expected time to find all users passwords in UNIX using dicitionary attack?
I was reading that the designers of UNIX password algorithm used a 12 bit salt to modify the E-table of the unix hashing function (the DES).
Supposing i have a system with 2^(24) users?
Is that ever possible to user dictinary attack? and if so how…
superfloyd
- 97
- 1
- 10