bad idea. What if someone starts building a rainbow table specific to that salt? Do I rotate salts with each version and check for each one of them while decrypting? or do I look for on-demand compile builds?
ideally salt values are just randomly generated (pseudo-randomness should be fine)
If you have a static salt its better than none, but its still cheaper to crack than random salts on each entry as you can the spin up a common dictionary with your salt added and quikcly recover most passwords.
Обсуждают сегодня