On 9 sep 2009, at 12.48, Rick van Rein wrote: > More accurately: it does not have to be a secret. But it is important > that it cannot be influenced by an adversary. That's the main reason > to use random numbers as salts. right. do you agree that rand() - or maybe arc4random() - is good enough? jakob