earblast·il y a 7 ans·discussHmm, seems to me using both is optimalhorrible psuedocode follows... cryptchoice = len(username) % 3 switch cryptchoice: case 0: pepper = pepper[1] salt = email case 1: pepper = pepper[0] salt = creation_time case 2: pepper = pepper[2] salt = username bcrypt(salt+password+pepper)
earblast·il y a 7 ans·discussWhat can someone use as a salt that is unique to a user that would not be in that record as plain-text and guess-able? Creation timestamp? email? username?
earblast·il y a 7 ans·discussBeing colorblind, This map is completely useless. At least the table is there
horrible psuedocode follows...