Bcrypt does its own salt