In our project we decided to use MD5 in order to encrypt passwords before being stored in the database. Development has taken place, and now we realise that MD5 has in fact been broken, I also read using a salt would mitigate much of the problem.
Would it be ok to carry on using MD5 but with a salt appended? To use a salt is it just random secret characters appended to the end of the password prior to encryption?
Surely the security would not be much of a problem, as in order to even reach the hashes they still have to hack the db, which would be next to impossible in itself, and if they could do that, there would be no point in finding the passwords anyway....
...
Go to the complete details ...