The idea of "salting" a password with something user-specific is actually a bit more involved than that. The idea is that, if users A and B had the same password and someone was able to get hold of the hashed passwords, if they knew A's password then they'd spot that B had the same hash and hence probably the same password. Salting the password with something unique to that user prevents this problem.
|