ENSign in

Verification · what can actually be checked

Verification

Why a salt is necessary and not a detail

A salt is random data mixed into the text before hashing. Without it, a hash of a short predictable pick can be broken by simply trying every possible pick until one matches.

The space of possible selections on a given day is small — a few hundred teams, a handful of markets. Hashing all of them takes seconds, so an unsalted commitment reveals its own contents to anybody who bothers.

The attack in full Take the published hash. Generate every combination of team, market and line on today's board. Hash each one. Compare. The pick is recovered before the game starts, and the commitment has protected nothing.

The salt must be long and genuinely random, and it must be revealed afterwards along with the pick, or the hash cannot be recomputed by anybody.

And that is the trap. A commitment scheme without a salt is theatre, and the difference is invisible from the outside unless you specifically look for whether a salt is published at reveal time.

What to do with it. Look for the salt in the reveal. If it is absent, the scheme is decorative regardless of how the hash is presented.

Today's free pick (not the main pick)

Today's free pick, for your email

Team, bet, price and the hash it was sealed under, on this page the moment you send. Lose or win, it stays public.

Unlock today's pick in Telegram →Telegram channel: sealed picks and the record, 21+ →

or by email

Public record of the main pick, losses included: 115 won, 44 lost. See every pick

One free pick a day by email until you unsubscribe, in one click. 21+.

More Verification