Hello,
I'm looking into incorporating SALT into an existing user password mechanism.
Currently SHA2 is used and the hashed passwords are stored in the DB. Just to clarify, I'm not referring to the the user/password used to login to the DB, but user/password for my application.
I would like to add SALT to the HASH as well. I was wondering if there are any best practices to using SALT in Oracle database?
What algorithms to use? and so on.
Worth mentioning that running on Oracle 12c.
Thanks,
David.