Question

I’ve always been curious… Which is better when salting a password for hashing: prefix, or postfix? Why? Or does it matter, so long as you salt?

To explain: We all (hopefully) know by now that we should salt a password before we hash it for storage in the database [Edit: So you can avoid things like what happened to Jeff Atwood recently]. Typically this is done by concatenating the salt with the password before passing it through the hashing algorithm. But the examples vary… Some examples prepend the salt before the password. Some examples add the salt after the password. I’ve even seen some that try to put the salt in the middle.

So which is the better method, and why? Is there a method that decreases the chance of a hash collision? My Googling hasn’t turned up a decent analysis on the subject.

Edit: Great answers folks! I’m sorry I could only pick one answer. 🙂

Answer 1

Prefix or suffix is irrelevant, it’s only about adding some entropy and length to the password.

You should consider those three things:

1. The salt has to be different for every password you store. (This is quite a common misunderstanding.)
2. Use a cryptographically secure random number generator.
3. Choose a long enough salt. Think about the birthday problem.

There’s an excellent answer by Dave Sherohman to another question why you should use randomly generated salts instead of a user’s name (or other personal data). If you follow those suggestions, it really doesn’t matter where you put your salt in.