Forgive me, as I am very new to cryptography, but it seems interesting, and I have a question.
I'll state my beliefs and please feel free to correct me on the aspects that I'm mistaken so i can learn:
Here's what I think I know:
- When trying to protect a password, it goes through a hash function (i.e. SHA-1), and the resulting hash is stored in the database instead of the actual password itself.
- Any time one attempts to log in, and they type in their password, their entry gets hashed and then compared to the hash value in the database
So does this mean that for a given login system, if i type "password1", it always has the same hash value?
If that is the case, then wouldnt all members of a login system who have the same password also have the same hash value in the database? Or is there an additional form of security/differentiation implemented for each user so that my "password1" does not come out to the same hash value as the "password1" of another user?