Hacker News new | past | comments | ask | show | jobs | submit login

In a password hashing scheme with a salt, you're supposed to consider everything except the cleartext to be public, for the purposes of analysis. The password should be unrecoverable even if the attacker knows the algorithm and any salts.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: