Re: Where to store your salt

From: Derek Slager (derek_at_activate.net)
Date: 01/26/04 

Date: Mon, 26 Jan 2004 11:00:20 -0800

On Fri, 23 Jan 2004 22:41:26 -0500, Edgar Sánchez wrote:

> Reviewing the code in "Building Secure Microsoft ASP.NET Applications" for
> hashing passwords with salt, I see that the salt is stored in the same table
> as the hashed password. The idea of using salt is to make a dictionary
> attack harder but if we store the salt close to the hashed password then the
> attacker can attach the salt to the dictionary passwords and go on with
> his/her attack. For what I understood of the salting technique, the salt
> should be saved somewhere else, is this right or I am missing something?

Salt values are primarily used to prevent dictionary attacks using
pre-computed hashes. It's better to store it separately, but unless they
have already computed the hashes for their dictionary using the exact same
salt value they still have work to do.

-Derek

Relevant Pages

  • Re: passwd replacement
    ... If you are generating a hashed password, ... The hash is a one-way function, ... all variations on the same theme. ... The "salt" determines which of the 4096 functions was used ...
    (comp.unix.solaris)
  • Re: Values to use for a salt?
    ... the salt would not have to be ... dictionary attacks a salt is used for avoiding situations where two users ... using the same password which -- as a hashed password -- is then equal as ... users may change passwords but they never change user IDs (at least I have ...
    (SecProg)
  • Re: Password scrambler program
    ... provide the string to salt it with) MD5 equivalent with the ability to ... password) is sent to a hash function and hashed multiple times - 1000 is ... and so not helping at all against some types of attack. ... might as well grab, for example, the keys from disk encryption ...
    (sci.crypt)
  • Re: Password scrambler program
    ... provide the string to salt it with) MD5 equivalent with the ability to ... password) is sent to a hash function and hashed multiple times - 1000 is ... is not a trivial problem if it's properly chosen, no matter ... and so not helping at all against some types of attack. ...
    (sci.crypt)
  • Re: Hashed password secure?
    ... Consider the way that a typical password hash attack program works. ... the salt, and then it hashes the dictionary once for each unique salt value ... again, 2^8 different salt values in the password file, but the attacker ... But what about the legitimate verifier? ...
    (sci.crypt)