BxJS Weekly Episode 65 - javascript news podcast
Tim Ermilov

Tim Ermilov @yamalight

About: Hi, I'm Tim. I talk about webdev, javascript and video games.

Location:
Germany
Joined:
May 23, 2018

BxJS Weekly Episode 65 - javascript news podcast

Publish Date: Jun 2 '19
31 3

Hey dev.to community!

BxJS Weekly Episode 65 is now out! 🚀
Listen to the best javascript news of the week in a podcast form right here.

Here's all the mentioned links (also found on github):

Getting started:

Articles & News:

Tips, tricks & bit-sized awesomeness:

Releases:

Libs & demos:

Interesting & silly stuff:

Any feedback is appreciated 😁

Additional stuff:

Social media links:

If you enjoy my content, please consider supporting me 😉

Comments 3 total

  • ZaneHannanAU
    ZaneHannanAUJun 3, 2019

    Just saying -- storing the salt alongside the hash is very common. It's used just about everywhere (/etc/shadow, bcrypt in general…).

    The alternative is: how are you to be able to log in? If the salt isn't stored, then the hash becomes useless. If it is stored, but is constant across the database; then what point does the salt have? It would be a problem were it sha1 or similar, but it isn't.

    Other than that… argon2 is quite strong so far at least.

    • Tim Ermilov
      Tim ErmilovJun 3, 2019

      But if your DB is leaked - wouldn't that make decrypting password easier? 🤔
      Having one common salt that's not in DB would mean that attacked upon acquiring that DB would have to first figure out what that salt was.
      Or am I just misunderstanding something here? 🤔

      Edit: Just did some googling, and apparently I totally confused salt with encryption keys used in a different set of algos all this time. I am a bit of an idiot 🤦‍♂️

      • ZaneHannanAU
        ZaneHannanAUJun 3, 2019

        Yeah. Main difference is between initialization vector/key (you keep the initialization vector and remember the key) and a randomness adder (salt). A salt and an IV are similar, in that they introduce uniqueness into place there might not be otherwise.

Add comment