-
-
Notifications
You must be signed in to change notification settings - Fork 8
Salt character order should be randomized #41
Copy link
Copy link
Closed
Description
When a salt is generated, the order of the characters is always the same as the order of the salt sources. This makes the salt more predictable.
To demonstrate:
Order is always uppercase, lowercase, digits, symbols, then Latin 1 supplements. Changing the order of the salt sources just changes that order but the characters are still grouped together.
Instead, the salt should be generated with characters from the sources in a random order. So instead of something like "prayers851{?" the password could be "prayers5{18?" and the order of the salt sources wouldn't matter.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels

