Stack Overflow
Stack Overflow

Questions tagged [salt-creation]

11 questions
14
votes
4 answers

How to generate a random, long salt for use in hashing?

What is a way in PHP to make a random, variable length salt for use in hashing? Let's say I want to make a 16-character long salt - how would I do it?
Tony Stark
  • 24,588
  • 41
  • 96
  • 113
3
votes
1 answer

Salting a password - are there better options than using a timestamp?

I'm currently building a couple of ASP.NET MVC 2 sites, and am wondering what my options are for salting a password. With my PHP work, I usually just obtained the timestamp of when a user registered, then appended it to the end of their password…
Major Productions
  • 5,914
  • 13
  • 70
  • 149
1
vote
1 answer

Creating salt with Portable PHP password hashing framework

I'd like to use Portable PHP password hashing framework to hash passwords. But I find that its demos don't use salt for hashing a password. But it use a dummy salt for checking password which I find it strange and I don't understand this idea at…
Run
  • 54,938
  • 169
  • 450
  • 748
1
vote
4 answers

Java - Generating a random salt isn't random

I'm trying to generate a salt in Java to use with a hashing algorithm for secure password storage. I'm using the following code to create the random salt: private static String getSalt() throws NoSuchAlgorithmException { SecureRandom sr =…
ChrisTansey
  • 40
  • 1
  • 7
1
vote
4 answers

Is salting passwords with base 64 secure?

In a web application I am reading some bytes from /dev/urandom to get a random salt for hashing the passwords. Is it good to base64 the salt before hashing? Because base64 encoding sometimes appends some = at the end, which could then result in a…
Hendrik
  • 131
  • 1
  • 10
0
votes
1 answer

SaltStack base, dev, prod environment setup question

New to saltstack, I have created a base environment and seems to be working fine. Now I'm trying to setup a dev and prod environment so I can have have custom modules along with also adding some from the base environment. However even with setting…
fndogonza
  • 1
  • 2
0
votes
0 answers

Specified target is a directory salt file manage

I want to mount settings.py from salt master to a salt minion running on aws ec2 instance. I set makedirs to be true for it to always mount the latest settings.py to the minion. However, the target path I set will be parsed as a directory rather…
RandomEli
  • 1,527
  • 5
  • 30
  • 53
-1
votes
2 answers

Expanding and using salt generation code for a php login system

I am working on a php/mysql login system for a webproject. After looking through SO and alot of articles on the web Ive come up with a basic framework and started writing some code for it. However Ive come to a bit of an impasse in password…
Sam Genest
  • 107
  • 1
  • 12
-1
votes
1 answer

Salt location , salt hiding

i have a question regarding the following scenario: I want to use jasypt to encrypt my password and use a certain salt for encryption. Does it make sense(or is there any security implication) if : I use password based encryption to encrypt the…
BL.
  • 89
  • 1
  • 6
-1
votes
1 answer

Creating random salt in PHP5.3 every time

I am trying to create 200 characters salt manually and using it with md5 as an parameter to protect passwords with one of my SLIM3 web-app project with string hash ( string $algo , string $data [, bool $raw_output = FALSE ] ) I want the salt to…
Rubin Gajera
  • 77
  • 2
  • 12
-2
votes
1 answer

get only the first 10 characters of 256 bit hash instead of complete hash value

Username ABC Password DEF Salt = Username + Password IE; ABCDEF(saltkey) Now, this salt key is hashed using SHA256 algorithm and the output for the saltkey(ABCDEF) after hashing it is: jjaiBx04mbD1ZvsLKuG6PyBFfJcYbl7iCnDCsi2l4tk= Now how do I…
krishna P
  • 19
  • 2
  • 4