search

kelektiv / node.bcrypt.js

bcrypt for NodeJs
MIT License
7.49k stars 518 forks source link

saltrounds and hash #415

Closed eugen35 closed 8 years ago

eugen35 commented 8 years ago

hello! I am new in hashing of passwords. Just have readed some articles about it and some things from them not match for your api. The mentioned things 1)\ in articles: hash=hashFunc(password+uniqueSalt). And if salt is unique, so i need to save in DB hash and unique salt by you: hash=hashFunc(password+uniqueSalt). But as result hash="salt+something". This something is hash or not? So i dont need save in DB hash and uniqueSalt, i.e. salt saving with hash in one string? 2) in articles: rounds quantity is used by gen hash by you**: rounds quantity is used by gen salt

Can you explain mentioned difference?

defunctzombie commented 8 years ago

Please try a support forum like stack overflow to learn more about bcrypt and hashing. This is an issue tracker for issues with this library specifically.

eugen35 commented 8 years ago

thank you