I have two questions here:
1) How many possible randomly generated salts could be generated using PHP's
2) According to php.net it states that the return value is a contains "the algorithm used, the cost and salt are returned as part of the hash" and I assume the hash itself. So from my understanding in a returned string of
2y indicates the algorithm, the
10 indicates the cost, but which characters indicate the salt and which characters indicate the hash?