What is the problem? Does bcrypt truncate "salt+pepper"? | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		ufo on March 28, 2015 \| parent \| context \| favorite \| on: Slack was hacked What is the problem? Does bcrypt truncate "salt+pepper"?

iopq on March 28, 2015 [–]

Because the salt is in the hash!

$2a$12$GhvMmNVjRW29ulnudl.LbuAnUtN/LRfe1JsBm1Xu6LE3059z5Tr8m

$2a means it's using bcrypt version 2a

$12 means 12 rounds

GhvMmNVjRW29ulnudl.Lbu is the salt

AnUtN/LRfe1JsBm1Xu6LE3059z5Tr8m is the checksum

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact