Foren

What salt is used with SHA-256 password encryption?

Jostein Baustad, geändert vor 12 Jahren.

What salt is used with SHA-256 password encryption?

New Member Beitrag: 1 Beitrittsdatum: 12.04.12 Neueste Beiträge
Does Liferay password encryption algorithm SHA-256 use a salt? If yes, how is the salt generated and what is the size?

passwords.encryption.algorithm=SHA-256
thumbnail
Hitoshi Ozawa, geändert vor 12 Jahren.

RE: What salt is used with SHA-256 password encryption?

Liferay Legend Beiträge: 7942 Beitrittsdatum: 24.03.10 Neueste Beiträge
Looking at the code, PwdEncryptor.encodePassword() doesn't seem to be using seed when algorithm is SHA-256.

http://grepcode.com/file/repo1.maven.org/maven2/com.liferay.portal/portal-impl/6.1.0/com/liferay/portal/security/pwd/PwdEncryptor.java/