Using a Salt Value with the user password

Asked By Marise 0 points N/A Posted on - 11/07/2011

I would like to know the reason behind using a Salt Value with the user password. In addition, please clarify how it is used in the encrypted value and where it is stored?
 

• Status: Open
• Question Views: 1025
• Answer Count: 1
• Vote Up 0 Vote Down

• Answer Accepted: No
• Question Category: Misc Security

Answered By Mahesh Babu 20 points N/A #106398

Using a Salt Value with the user password

Hello Marise,

The reason why the salt value has to be used with a password is mainly to enhance the security of that mechanism. If it ever happens that two people end up sharing a password, the salt value is meant to make sure that the password will not be so obvious, otherwise a person who happens to share the same password with another will easily manipulate the password of the other person in case a random salt value for the password is not assigned.

So using the password for the salt value simply boosts the security and protects against an attacker.

 

Hope this helps.

__

Regards
Mahesh Babu

 

About Mahesh Babu

Questions
1

Answers
473

Best Answers
87

• Vote Up 0 Vote Down

• Posted on - 11/23/2011
• Question Category: Misc Security