• Nice question.

    Stewart "Arturius" Campbell (2/9/2012)


    One would expect MS to allow an optional parameter for salt to the HASHBYTES function...

    Or maybe not - unless perhaps they also provided a parameter to indicate whether the salt should be prepended or appended; Steve's code does the latter, but that's pretty unusual because people who deal with cryptographic matters (like hashing and encryption and key management and secure login and...) are used to prepending a salt (because in front is the only place it's useful in the applications of CBC mode encryption that need a salt).

    Tom