Comment Comment by sarciszewski "Both our salts and pepper are 40 characters in length and are randomly generated."From their CTO (on Disqus in response to my question):"The salt, pepper, and password were concatenated together to form the string that was in turn passed to the hashing function."http://3v4l.org/cE35940 + 40 + strlen($password) > 72Uh-oh. parent sarciszewski 11 years ago
From their CTO (on Disqus in response to my question):
"The salt, pepper, and password were concatenated together to form the string that was in turn passed to the hashing function."
http://3v4l.org/cE359
40 + 40 + strlen($password) > 72
Uh-oh.