Is Salt, IV and Key necessary when encrypting password in a database using AES? If so, how should they be used?
Imagine I have a website with user accounts. I want to authenticate users, so I need to know if the password they provide matches the one stored in my database. To protect the passwords from prying ...