c3b2a7 / c3b2a7.github.io

https://lolico.me
4 stars 0 forks source link

时间戳作为salt时的精度问题 | Lolico's Blog #32

Open c3b2a7 opened 4 years ago

c3b2a7 commented 4 years ago

https://lolico.me/2020/01/23/%E6%97%B6%E9%97%B4%E6%88%B3%E4%BD%9C%E4%B8%BAsalt%E6%97%B6%E7%9A%84%E7%B2%BE%E5%BA%A6%E9%97%AE%E9%A2%98/

前言在web项目中采用用户注册时的时间戳作为密码加密的salt:123public String getSalt(User user) { return String.valueOf(user.getRegistrationTime().getTime()/1000L);}数据库中保存注册时间戳的字段类型使用Timestamp(0)即10位精确到的秒时间戳注册用户逻辑:1