Did you say about this
http://social.msdn.microsoft.com/Forums/en-US/vbgeneral/thread/0bb95e4c-7f8d-434d-8dcd-afe953e2ec7f
www.shariqdon.media.officelive.com
is it Help ful to Encrypt Your Pass word
http://social.msdn.microsoft.com/Forums/en-US/vbgeneral/thread/1e0c977f-d023-4e8f-b551-24e15108b4ab
www.shariqdon.media.officelive.com
Well, Both of them are really simiple to crack. What i was thinking of doing is in my question you would get g1i2h3h4q5d6g7rp4a7s;?s`w6o+r/d5 as your output if the password that has been injected with random letters/etc. I was thinking of doing that and salting it then hashing it. But i dont know if the password would still be accepted because if i were to do it again when the user is trying to login, the password would always come out different because your injecting random letters/etc into the password. and when you try to compare the passwords it wont work because the new injected password is different from the password that was entered in at registration.
EX:
SALT = 123223534647sergsergserg
Password at registration with injected password= g1i2h3h4q5d6g7rp4a7s;?s`w6o+r/d5123223534647sergsergserg (note: i added in the salt)
Password at regisration now hashed = awefawefawefawefawef (example)
-----------------------------------------------------------------------------------------------------
if i were to try to login with
SALT = ioserngsnerigs98ty3984nsoeirg
password = `1w2g3"4'5;617;p4abs+s/w/o7r.d\
new encrypted pass = `1w2g3"4'5;617;p4abs+s/w/o7r.d\ioserngsnerigs98ty3984nsoeirg (note: i added in the salt)
wouldnt the hash be totaly something different? and if i were to salt it with random letters/etc.
So wouldnt that mean adding in random salt wouldnt work because i saw in a couple of examples on google, they added in random salts.