Replies: 1 comment
-
Essentially because I can't come up with any valid use case for this. Deterministic hashing is useful for key derivation. But when encrypting a password, what would be the point? The resulting string already encodes the salt, so there's no need to store it separately. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hi! I am still writing my bindings to libsodium, and I realised that there is no documented way in the website to hash a password with the
crypto_pwhash
API in a way that encodes the result and gives control to the user over the salt. Not sure if this is a pattern that is enforced by design, and I wanted to have some clarification as to whycrypto_pwhash_str
didn't take a salt, whilstcrypto_pwhash
does. :)Cheers!
Beta Was this translation helpful? Give feedback.
All reactions