Hi Rich, > Date: 2026-11-11 16:13:13-0500 > From: Rich Felker > [...] > > I'm not sure where you're getting this from. All implementations of > the same password hash function need to produce the same result, or > user credentials would not be portable between different ones. And a > password hash that does not use any salt would not be fit for purpose. > > In musl's crypt_sha512.c, the salt is isolated from the setting string > in lines 262-266 and used in the sha512_update operations that follow. I'm not a cryptographer, so my reading of that code isn't very good. Thanks for correcting me! Have a lovely night! Alex > > Rich --