There you're talking a statistical analysis of a code, specifically one based on a "code book", which are vulnerable to attacks like this. Hashes are designed to prevent this by being (ideally) evenly distributed based on input, and salts destroy analysis across multiple clients. To perform that sort of attack, your hash function would have to be "cracked" in some way, like MD5 is (you can create collisions easily - values which resolve to the same hash), and thus almost totally worthless.
I wish I could, actually. I've just been picking it up by reading random articles for a couple years now, writing some Rails code, and looking things up (details / best-practices) as I go. Not a route I'd suggest in general, but it works if you're focusing on other things.
What got me started & revealed a lot of other cryptography techniques was to look into how Diffie-Hellman[1] and RSA[2] work (they're not too complicated, really), understand what hashing functions do, if not necessarily how, and then look around at news of exploits / attacks. A lot to understanding secure code / techniques is understanding how the attacks work, and a lot of the news around them contain surprisingly-good explanations.
Anyone else have suggestions? I could probably use them too.
I found Katz & Lindell's Modern Cryptography, a textbook written by active research cryptographers, quite good. The classical "applied" work is Schneier's Applied Cryptography", but note there are a lot of issues with that work. His newer book, "Cryptography Engineering", is supposedly better.
Goldreich's Foundations of Cryptography is quite solid, but requires quite a bit of background and is very theoretical.
