Quick question, if you have the db but not the salt, does the speed of the hashing algorithm still matter?
Disclaimer: I'm absolutely not a security professional.
I was also confused by these frameworks (e.g., Django) that ask you for a secret key and I thought that the secret key was a site-wide salt. Fortunately, they knew better than me ;-)