Optimal password salt length
- by Juliusz Gonera
I tried to find the answer to this question on Stack Overflow without any success.
Let's say I store passwords using SHA-1 hash (so it's 160 bits) and let's assume that SHA-1 is enough for my application. How long should be the salt used to generated password's hash?
The only answer I found was that there's no point in making it longer than the…