storing a hashed password is vulnerable to a rainbow attack.
you need a salt, and you store both.
see post#4 and the links to understand the process.
edit:if you are using .NET, then use Rfc2898DeriveBytes to manage password and salt.
|
Results 1 to 16 of 16
Threaded View
Tags for this Thread |
Click Here to Expand Forum to Full Width |