Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

What is the problem? Does bcrypt truncate "salt+pepper"?


Because the salt is in the hash!

$2a$12$GhvMmNVjRW29ulnudl.LbuAnUtN/LRfe1JsBm1Xu6LE3059z5Tr8m

$2a means it's using bcrypt version 2a

$12 means 12 rounds

GhvMmNVjRW29ulnudl.Lbu is the salt

AnUtN/LRfe1JsBm1Xu6LE3059z5Tr8m is the checksum




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: