dc401/Dynamic-Salting-Example
This is a demo project to show the proof of concept behind dynamic salting as opposed to static salting. Many developers mistakenly use the same salt in addition to a user's password to create a new hash. Unfortunately, attackers can pre-compute static salts easily as well by doing the same thing. Using dynamic salting by creating complex functions that determine what the salt is based on user record information can help increase the barrier and reduce the risk of pre-computed attack success rate.
正在读取项目信息…