Posted on: 11/4/2014 4:37:13 AM | Views : 443

Dear,
I am working on an application in which i have to store passwords in database after the passwords have been hashed , i am trying to look for what i want for several days now but not able to find the solution so please if anyone could clear my doubts,
Requirement->I want to make a hash of a password and then use a salt and store them as a concatenated string
Doubts->(1)Do i have to take only one field in a database named password which will have the password or do i have to take one field for hashed password and one for storing salt(if i am storing salt will it be plaintext or hashed salt in database because many places i have seen they say you dont need to store hashed salt in database just store plain salt).
(2) since salt is a random string when i validate the password how will i get that random string to match the password can i validate thatnin sql server or i have to validate in the code because they say you have to validate on th ...

Go to the complete details ...