Questions tagged [saltedhash]

72 questions
0
votes
0 answers

data and salt argument with bcrypt

I used the same module for every one of my subscriptions but I don't why with this one I have this Error: data and salt arguments required with a code 500. maybe there is an update? But I can't find anything about that ... also my code inscription:…
Xwingoga06
  • 99
  • 1
  • 10
0
votes
1 answer

Where to get salt when hashing passwords?

I learned that I need to use salt so that same passwords won't show in database. But where to get the salt? I cannot use one for all as it wouldn't help anything. I can generate a random one, but then the hash would be different every time and…
0
votes
1 answer

perl: using Digest::SHA3, using basic example from online, the bit value of the output puts it at 160, which says is a weak hash length(?)

i am using the following code to learn/familiarize myself with one-way password encryption, salting, and using them to verify a user on log in. it works, i store the hashed password and the salt value in my database, i can retrieve both and compare…
spewn
  • 9
  • 2
0
votes
1 answer

encrypting password: when it is too much?

I am updating my helper functions library. I am wondering whether it is too much of salt in the password encryption? Is there any difference between: mb_substr(sha1($str . AY_HASH), 5, 10) . mb_substr(sha1(AY_HASH . sha1($str . AY_HASH)), 5, 10) .…
Gajus
  • 69,002
  • 70
  • 275
  • 438
0
votes
0 answers

How to change password using passport-local.Strategy and crypto in expressjs?

Below is the code I am trying: index.jsand its not working while changing the password in terms of salt and hash.(saving them in database) I am keep getting the error as setPassword is not defined. Also I think I am committing code errors as well. I…
0
votes
1 answer

Salted Hash Password Authentication

I've been reading up on OWASP 10 and I came across the best practice to store information. Salted hashing. Where you generate one random salt for every password and combing it and hash it and store it. My doubt is, if the salt is generated randomly…
Sujith
  • 3
  • 4
0
votes
2 answers

One way functions, Hash algorithms

Basically One-way functions have two properties: 1. Irreversible 2. Collision-Resistance(which means no two same words have the same hash value correct me if im wrong) On the other hand i see that Salted Hash Passwords are used to provide more…
Lorik Berisha
  • 243
  • 1
  • 2
  • 20
0
votes
1 answer

How to get the same salted password in Java as by using openssl passwd?

What I need is to get the same result as: # openssl passwd -1 -salt SaltSalt thesecretpassword $1$SaltSalt$d4KyTrYpU26ghRyvibVDY0 At least the last part(d4KyTrYpU26ghRyvibVDY0), as the first two parts are fixed to $1$SaltSalt$. This is needed, so…
ILAPE
  • 47
  • 1
  • 5
0
votes
1 answer

How to get salt from MySql database using Asp.net?

How can I retrieve salt from MySql database using Asp.Net ? I want to use that retrieved salt to add to the user entered password to generate an SHA256 hash and then authenticate the user. Here is what I am trying to do to fetch the salt: String…
Deep
  • 81
  • 2
  • 11
0
votes
0 answers

ASP.NET C sharp- Salting and Hashing user passwords in MySQL database

I wonder to ask you about ASP.net C sharp to solve my problem. I created MySql Database that has these fields in user register table(userName,Email,password,postCode,slowHash) then I created (PasswordHash) class that contains a Copy code from this…
user2148116
  • 195
  • 1
  • 2
  • 13
0
votes
1 answer

Saving passwords for non-interactive login

I understand that using salted hashing is the preferred method to save passwords in a database. However this works only when for interactive purposes. For example, User uses an registration form to fill passwords which is then saved as salted hash…
toddlermenot
  • 1,588
  • 2
  • 17
  • 33
0
votes
1 answer

Generating Unique Invoice tracking in dot net

I need to produce a unique tracking number with only 10 digits in length. as i google the only usefull article from stackoverflow Generating unique tracking numbers but this is not dot net code. i try to find find a way to write dot net equivelant…
Benyamin Jane
  • 407
  • 2
  • 5
  • 16
0
votes
0 answers

change password bcrypt with hash and salt on ruby on rails 4.2

I'm trying to change the user password using the gem bcrypt and the hash-salt method. Here's my code where i include my attempt to change password, but it gives me an error of a missing template. User Controller def create @user =…
0
votes
1 answer

php hashed password check not working

I'm having a weird problem with hashed passwords. I've used the same script from another website on another server (linux running php) on this website (Windows running php). The login won't work, the stored hashed password doesn't match the entered…
0
votes
1 answer

How secure is this way of storing passwords?

I understand and recognize that storing passwords in my own database is a massive security hole compared to using services like Google or Facebook, but I was wondering if the following code could be used to securely store usernames and passwords…
Michael Shift
  • 104
  • 2
  • 8