Salt & Pepper
Salt and pepper make cryptographic hash functions more difficult to reverse. Both salt and pepper may be added to data before hashing it. Passwords are commonly stored as a hash code. This prevents the stored passwords from being used. One common way to break a hash code is to use precomputed tables of hash codes for common passwords known as rainbow tables. Salt and pepper defend against this type of attack.| Salt vs Pepper | ||
Salt | Pepper | |
Definition | Random data that is added to data before passing it to a cryptographic hash function. Salt may be stored alongside the hash value. | Random data that is added to data before passing it to a cryptographic hash function. Pepper is kept secret by storing it in a separate secure location or not storing it at all. |
