New answers tagged

2 votes

Can somebody explain simply why crypt of a password with a salt (the hash result) is equal to crypt of the password with the hash result itself?

To expand on Sjoerd's answer: The original crypt(3) used DES, and used a very short 2-byte salt (it actually only used 12 bits of that), which was included as the first two bytes of the result, ...
jcaron's user avatar
  • 3,615
22 votes

Can somebody explain simply why crypt of a password with a salt (the hash result) is equal to crypt of the password with the hash result itself?

The output of crypt looks like this: $1$L2l4$oqf.HIrymNg/YIIF.r.rP0 This is not just the cryptographic hash. The dollar signs in here split the structure into three strings: 1, the type of hash ...
Sjoerd's user avatar
  • 30.4k
5 votes

Can somebody explain simply why crypt of a password with a salt (the hash result) is equal to crypt of the password with the hash result itself?

... it is not easy to extract the salt value from the hash The problem is that the term "hash" is overloaded with several different meanings and that you use the wrong meaning to interpret ...
Steffen Ullrich's user avatar
17 votes

Can somebody explain simply why crypt of a password with a salt (the hash result) is equal to crypt of the password with the hash result itself?

In this case man 3 crypt is probably more useful than asking AI. AI has a tendency to be... not entirely correct. The man page has the following about return value: Upon successful completion, crypt, ...
vidarlo's user avatar
  • 16k
0 votes

Do salts have to be random, or just unique and unknown?

Any salt whatsoever improves your security. Without a salt, an attacker could identify all 1,000 accounts with password 123456. They wouldn’t know the password but they would know it’s very, very ...
gnasher729's user avatar
  • 2,331

Top 50 recent answers are included