Is there a significance to the word "salt" for a password salt?
-
Hard to say if this is related, but as a teenager I worked as a package loader at UPS. Every box coming into the truck was supposedly of the same area code, but the supervisors would "salt" boxes to the wrong zip code to make sure we were paying attention.– Eric_WVGGMay 28, 2015 at 18:59
8 Answers
http://www.derkeiler.com/Newsgroups/comp.security.misc/2003-05/0154.html
The use of the word "salt" is probably a reference to warfare in ancient times, when people would salt the wells or farmland to make it less hospitable. The Romans are sometimes supposed to have done this to Carthage in 146 BC. In the context of passwords, a "salted" password is harder to crack.
Apparently, there's no strong evidence even for the original "salting" of Carthage (http://en.wikipedia.org/wiki/Salting_the_earth) claim, but an interesting hypothesis nonetheless.
-
3+1 for the link, although I seriously doubt it's correct (not the history, just the relationship with cryptography)– Jon BOct 28, 2008 at 21:29
-
8Though whether or not the history is correct really has nothing to do with the etymology of the technical term. I have no idea who invented the term "salt" or what they were thinking when they did, but it is certainly possible that they were thinking of an historical allusion that turned out to be inaccurate. Like, if someone says "The author called this program George because, like George Washington, it never tells a lie,", the fact that you can prove that George Washington did tell a lie at some point hardly proves that that was not the source of the name of the product.– JayOct 19, 2009 at 13:45
The only meaning is that you are adding something to your password before you hash it, similarly to adding salt to your meal :-)
-
This is what I've guessed, but never found anything authoritative to back it up. Can you cite any sources for this?– ericksonOct 28, 2008 at 22:43
-
I don't have any source at hand now. That was only my perception from the texts I have read about that some time ago. Oct 29, 2008 at 10:08
According to Ken Thompson, one of the first people to use the term in a book, it's related to the term "salting a mine", referring to gold mines. Whether that is "correct" or not who knows? I doubt there's an actual correct answer to this, it's just one of those terms that doesn't really have to have a reason as long as what it means is understood.
-
Interesting. Can you elaborate? What does it mean to "salt a mine"?– ericksonOct 28, 2008 at 21:42
-
1It means to artificially lace a mine with gold to make it appear to be a gold mine. Not sure that relates directly to the purpose of a salt in cryptography, but not much else does either.– GeraldOct 28, 2008 at 22:10
-
4Well, there surely is a correct answer. I mean, someone must have been the first to use the term, and he must have had some reason for thinking it was appropriate. That said, I have no idea who invented it or what he was thinking. It might have been something very clear and insightful, or it may have just been that he was eating lunch when he came up with the idea and, groping for what to call it, noticed the salt shaker on the table in front of him. (There have been less significant origins of technical terms than that. Cf "googol" and "quark".)– JayOct 19, 2009 at 13:48
I would guess because it's easy to add "salt" (NaCl or a fixed string). But once you do, the output is irrevocably changed (food, encrypted password).
-
3if you put a potato, it's going to remove the salt.
http://wiki.answers.com/Q/How_do_you_remove_salt_from_food_when_you're_cooking
Mar 24, 2010 at 3:36
I had thought it related to the verb salt ...
(salt away) informal put by (money) secretly.
Because before you hash the password, you add a random text to it. So, it looks like as if you add some "salt" to the original "food" ... password :)
Once you add salt to food the real taste is no longer visible. So basically this is a figurative saying; add a little salt and it changes the original dish.