in reply to Re^2: Creating a rainbow table for a ten-digit number: Advice?
in thread Creating a rainbow table for a ten-digit number: Advice?

If they have access to the hashed ids on the laptop, they have access to the salt on the laptop too.
  • Comment on Re^3: Creating a rainbow table for a ten-digit number: Advice?

Replies are listed 'Best First'.
Re^4: Creating a rainbow table for a ten-digit number: Advice?
by BrowserUk (Patriarch) on Apr 12, 2010 at 01:17 UTC

    Not if it is entered manually each time the app is run and never stored to disk.

      Ok, so there exists a secret string. Don't use it as the salt to a hashing function, use it as the key to an encryption function. This whole hashing thing is nonsense.

        I completely agree that encryption is better than hashing. But hashing might be available where encryption isn't.

      Bingo. Good thought though.