2
votes
0answers
55 views

Knowing a valid salted hash for an unknown secret, is it possible to compute another valid hash? [migrated]

H(s,r)=d is a function that hashes the string s with a salt r, giving the result d. Hashing functions are not injective, so there isn't a reverse function H'(d,r)=s. Therefore to prove that d is a ...
2
votes
1answer
1k views

Is BCrypt enough when saving a password into a database?

In order to allow users to connect to my website, I encrypt their password using BCrypt since it is one of the slowest algorithms to decrypt (making a compromised database longer to be decrypted). ...