it is salt, not hash