Stack Overflow
Stack Overflow

Questions tagged [saltedhash]

72 questions
1
vote
1 answer

How to encrypt using SHA256 and salt?

Before: I'm sorry for my english. Ok right now i'm using the following encrypt method: SHA256_PassHash(inputtext, "78sdjs86d2h", MyHash, sizeof(MyHash)); SHA256 WITH SALT: "78sdjs86d2h Right now i'm checking the password like…
State Valentin
  • 37
  • 4
1
vote
0 answers

Unable to login while using salt for password hashing in cakephp3x

I have 2 fields password and salt in my users table. While saving the data, its working fine & data are being saved into both columns using the following code. $password = $this->Custom->hashSSHA(); $user->password =…
AAT
  • 411
  • 7
  • 16
1
vote
1 answer

Why do salts have fixed lengths?

I thought the reason to use variable, random strings as salts is to force the attacker to look up every salt before using his rainbow table on the hash. This takes a long time. But most developers seem to use fixed sizes for their salts. If you…
matkin
  • 42
  • 1
  • 6
1
vote
1 answer

Salted Password Hashing. Am I doing it right in ASP.NET environment?

I am developing a website by using ASP.NET. I want to implement login authentication for my users. I am using SALT HASH method to securely save users' passwords to the DB. By looking at various codes I wrote a code like below to generate the SALT…
Prageeth Liyanage
  • 1,612
  • 2
  • 19
  • 41
1
vote
2 answers

PHP login script security - using real/fake salt instead of lockouts

I've read various topics about php login scripts, so I'm not going to recap those discussions but I was wondering about the use of a real and fake salt in the password hash. Instead of an ID / password login prompt, I was thinking about a ID# / ID /…
user3421807
  • 11
  • 1
1
vote
2 answers

Typo3 with login, salted and rsa

we have a Typo3 plattform that has fe_login, salted and rsa activated. When i create a FE User in BE and check the MySQL user has salted password. In fronend the user logs in with RSA, but the fe_login doesnt work... http://dev.contextoo.net - maybe…
ekussberg
  • 559
  • 1
  • 8
  • 19
1
vote
1 answer

Decryption password using Salt in C#

Currently i am using salt to encrypt the password. public static SaltedHash Create(string password) { string salt = _createSalt(); string hash = _calculateHash(salt, password); return new…
Bokambo
  • 4,204
  • 27
  • 79
  • 130
1
vote
2 answers

Spring security generate a salted hash for users from command line

How do you generate a salted hash for users in spring security 3x from a bash command line?
Nigel_V_Thomas
  • 907
  • 13
  • 27
1
vote
2 answers

Create a password encrypted and store it in sqlite to use in authentication

I have a WinForms application, with login form, and I want to store the username and password encrypted in a SQLite database. I saw that I can use salt and hash, but I don't know how to encrypt the password in the code, and compare it when we…
Ostorlabi
  • 25
  • 1
  • 2
  • 10
1
vote
4 answers

PHP best way to salt a password in our time

How to make absolutely original salt for every user? Is it better to use time() function in PHP?
treng
  • 1,665
  • 3
  • 15
  • 22
1
vote
1 answer

Hashing using salt on android and iphone

I am developing an app on both android and iphone which requires encryption of some data. I want to know is there any way to encrypt data producing same hash on both platform. I have common salt, just wanted to have same encrypted data output from…
nishi
  • 1,245
  • 3
  • 13
  • 22
0
votes
0 answers

Proper way to convert string from Postgres back to a bytes in python

I have a postgresql db which contains following data: enter image description here credentials are bytes stored in table with usage of psycopg2.Binary. The issue is that the SELECT query run via Python returns strings (I need bytes to verify the…
Mateusz Boćko
  • 3
  • 1
0
votes
0 answers

What to do with an array of Salted Base64 strings?

I have been given this challange, to "hack" a website to register in it, with some given hints. It includes 3 steps. 1.site_url/login - a POST request with login credentials (username, password - I have these) in the body of the request. After this…
Taron Ghlijyan
  • 1
  • 1
0
votes
2 answers

Create Random Integer Based on Id in Ruby

I have a scenario where I need to generate 4 digit confirmation codes for individual orders. I don't want to just do random codes due to the off chance that two exact codes would be generated near the same time. Is there a way to use the id of…
TTDaVeTT
  • 127
  • 1
  • 9
0
votes
0 answers

Salted, per table-cell hashing in a database

I'm trying to come up with a good strategy for salting each row's column value in an SQL table with [semi-] independent salts for each cell. Ideally, I'd prefer a setup with only 1 secret salt per table, with the salt of each table-cell derived from…
Babak Farhang
  • 79
  • 1
  • 8
1 2
3
4 5