CS 526 Homework 1 Fall 2016 Question 1. (26 points) This question is about the use of public and private salts in password files, as explained in...

Need help with question #2

My Answer: Choice 1 & 5

1) First, you need to hash the password with the private salt.  

Note: It does not matter whether you put the private salt before or after the password as long as you stay consistent throughout and then hash it.

2) Second, you then need to hash the result of h(password, private salt) or h(private salt, password) to get the final hash output. 

This leaves choices 1 & 5 as your best option, because the public salt is performed last.   Note: You need to perform the public salt last.