Search code examples
mysqlmongodbpostgresqlrdbmsdatabase

Hashing data at database layer or application layer

I will take example of my case . I am using PostgreSql .I have gone through postgresql crypt() function documentation .

This function is provided as extension for postgresql .

If i migrate my data to another database by different vendor , Will the passwords still be evaluated properly or not ?.

If i try to compare the the hash generated in postgresql with hashing utilites provided by mysql/mongodb using same source string will it evaluate to be equal or not

Solution

  • According to docs, crypt()

    Calculates a crypt(3)-style hash of password. When storing a new password, you need to use gen_salt() to generate a new salt value. To check a password, pass the stored hash value as salt, and test whether the result matches the stored value.

    It means if you migrate your data to another database (if stored hash value is part of your data of course), the result of comparison will not depend on the system.